T18719] __do_fast_syscall_32+0x2af/0x480 [ 941.953073][T18719] do_fast_syscall_32+0x6b/0xd0 [ 941.957912][T18719] do_SYSENTER_32+0x73/0x90 [ 941.962411][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 941.968715][T18719] [ 941.971026][T18719] Uninit was stored to memory at: [ 941.976055][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 941.981875][T18719] __msan_chain_origin+0x50/0x90 [ 941.986801][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 941.991899][T18719] get_compat_msghdr+0x108/0x2b0 [ 941.996824][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.001317][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.005983][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.012040][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.018181][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.023367][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.028201][T18719] do_SYSENTER_32+0x73/0x90 [ 942.032690][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.038992][T18719] [ 942.041319][T18719] Uninit was stored to memory at: [ 942.046336][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.052043][T18719] __msan_chain_origin+0x50/0x90 [ 942.056969][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.062066][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.066993][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.071478][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.076146][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.082197][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.088335][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.093520][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.098355][T18719] do_SYSENTER_32+0x73/0x90 [ 942.102863][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.109163][T18719] [ 942.111472][T18719] Uninit was stored to memory at: [ 942.116504][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.122223][T18719] __msan_chain_origin+0x50/0x90 [ 942.127147][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.132250][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.137286][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.141778][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.146447][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.152508][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.158648][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.163939][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.168816][T18719] do_SYSENTER_32+0x73/0x90 [ 942.173315][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.179616][T18719] [ 942.181927][T18719] Uninit was stored to memory at: [ 942.186939][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.192643][T18719] __msan_chain_origin+0x50/0x90 [ 942.197657][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.202769][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.207707][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.212286][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.216956][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.223011][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.229155][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.234452][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.239296][T18719] do_SYSENTER_32+0x73/0x90 [ 942.243795][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.250100][T18719] [ 942.252411][T18719] Local variable ----msg_sys@do_recvmmsg created at: [ 942.259070][T18719] do_recvmmsg+0xbf/0x22c0 [ 942.263486][T18719] do_recvmmsg+0xbf/0x22c0 [ 942.498499][T18719] not chained 120000 origins [ 942.503323][T18719] CPU: 1 PID: 18719 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 942.511981][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.522115][T18719] Call Trace: [ 942.525412][T18719] dump_stack+0x21c/0x280 [ 942.529751][T18719] kmsan_internal_chain_origin+0x6f/0x130 [ 942.535475][T18719] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 942.541631][T18719] ? do_user_addr_fault+0x1347/0x19d0 [ 942.547022][T18719] ? kmsan_get_metadata+0x116/0x180 [ 942.552223][T18719] ? kmsan_set_origin_checked+0x95/0xf0 [ 942.557775][T18719] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 942.563855][T18719] ? _copy_from_user+0x201/0x310 [ 942.568801][T18719] ? kmsan_get_metadata+0x116/0x180 [ 942.574011][T18719] __msan_chain_origin+0x50/0x90 [ 942.578955][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.584082][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.589030][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.593555][T18719] ? kmsan_get_metadata+0x116/0x180 [ 942.598758][T18719] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 942.604656][T18719] ? kmsan_get_metadata+0x116/0x180 [ 942.609860][T18719] ? kmsan_internal_set_origin+0x75/0xb0 [ 942.615494][T18719] ? __msan_poison_alloca+0xf0/0x120 [ 942.620780][T18719] ? __sys_recvmmsg+0xbb/0x610 [ 942.625549][T18719] ? __sys_recvmmsg+0xbb/0x610 [ 942.630321][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.635048][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.641129][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.647288][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.652497][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.657356][T18719] do_SYSENTER_32+0x73/0x90 [ 942.661868][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.668217][T18719] RIP: 0023:0xf7f65549 [ 942.672279][T18719] Code: Bad RIP value. [ 942.676773][T18719] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 942.685189][T18719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 942.693161][T18719] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 942.701130][T18719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.709101][T18719] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 942.717070][T18719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.725049][T18719] Uninit was stored to memory at: [ 942.730080][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.735801][T18719] __msan_chain_origin+0x50/0x90 [ 942.740745][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.745862][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.750799][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.755304][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.759985][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.766051][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.772204][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.777492][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.782352][T18719] do_SYSENTER_32+0x73/0x90 [ 942.786870][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.793181][T18719] [ 942.795499][T18719] Uninit was stored to memory at: [ 942.800530][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.806252][T18719] __msan_chain_origin+0x50/0x90 [ 942.811193][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.816301][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.821231][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.825726][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.830397][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.836460][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.842612][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.847806][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.852655][T18719] do_SYSENTER_32+0x73/0x90 [ 942.857166][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.863474][T18719] [ 942.865794][T18719] Uninit was stored to memory at: [ 942.870814][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.876527][T18719] __msan_chain_origin+0x50/0x90 [ 942.881458][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.886561][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.891596][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.896090][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.900769][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.906830][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.912977][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.918168][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.923033][T18719] do_SYSENTER_32+0x73/0x90 [ 942.927532][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 942.933838][T18719] [ 942.936148][T18719] Uninit was stored to memory at: [ 942.941161][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 942.946962][T18719] __msan_chain_origin+0x50/0x90 [ 942.951886][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 942.956985][T18719] get_compat_msghdr+0x108/0x2b0 [ 942.961910][T18719] do_recvmmsg+0xdbb/0x22c0 [ 942.966572][T18719] __sys_recvmmsg+0x5dd/0x610 [ 942.971239][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 942.977293][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 942.983437][T18719] __do_fast_syscall_32+0x2af/0x480 [ 942.988635][T18719] do_fast_syscall_32+0x6b/0xd0 [ 942.993499][T18719] do_SYSENTER_32+0x73/0x90 [ 942.998005][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.004313][T18719] [ 943.006627][T18719] Uninit was stored to memory at: [ 943.011644][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 943.017354][T18719] __msan_chain_origin+0x50/0x90 [ 943.022281][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 943.027381][T18719] get_compat_msghdr+0x108/0x2b0 [ 943.032304][T18719] do_recvmmsg+0xdbb/0x22c0 [ 943.036792][T18719] __sys_recvmmsg+0x5dd/0x610 [ 943.041572][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.047622][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.053762][T18719] __do_fast_syscall_32+0x2af/0x480 [ 943.058947][T18719] do_fast_syscall_32+0x6b/0xd0 [ 943.063873][T18719] do_SYSENTER_32+0x73/0x90 [ 943.068364][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.074667][T18719] [ 943.076978][T18719] Uninit was stored to memory at: [ 943.082166][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 943.087958][T18719] __msan_chain_origin+0x50/0x90 [ 943.092881][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 943.097973][T18719] get_compat_msghdr+0x108/0x2b0 [ 943.102893][T18719] do_recvmmsg+0xdbb/0x22c0 [ 943.107380][T18719] __sys_recvmmsg+0x5dd/0x610 [ 943.112062][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.118129][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.124268][T18719] __do_fast_syscall_32+0x2af/0x480 [ 943.129451][T18719] do_fast_syscall_32+0x6b/0xd0 [ 943.134403][T18719] do_SYSENTER_32+0x73/0x90 [ 943.138896][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.145199][T18719] [ 943.147515][T18719] Uninit was stored to memory at: [ 943.152528][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 943.158232][T18719] __msan_chain_origin+0x50/0x90 [ 943.163157][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 943.168251][T18719] get_compat_msghdr+0x108/0x2b0 [ 943.173177][T18719] do_recvmmsg+0xdbb/0x22c0 [ 943.177674][T18719] __sys_recvmmsg+0x5dd/0x610 [ 943.182342][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.188491][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.194632][T18719] __do_fast_syscall_32+0x2af/0x480 [ 943.199817][T18719] do_fast_syscall_32+0x6b/0xd0 [ 943.204746][T18719] do_SYSENTER_32+0x73/0x90 [ 943.209240][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.215542][T18719] [ 943.217862][T18719] Local variable ----msg_sys@do_recvmmsg created at: [ 943.224563][T18719] do_recvmmsg+0xbf/0x22c0 [ 943.228987][T18719] do_recvmmsg+0xbf/0x22c0 [ 943.286224][T18720] not chained 130000 origins [ 943.290864][T18720] CPU: 0 PID: 18720 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 943.299527][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.309567][T18720] Call Trace: [ 943.312853][T18720] dump_stack+0x21c/0x280 [ 943.317177][T18720] kmsan_internal_chain_origin+0x6f/0x130 [ 943.322893][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.328082][T18720] ? kmsan_set_origin_checked+0x95/0xf0 [ 943.333709][T18720] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 943.339767][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.344958][T18720] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 943.350756][T18720] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 943.356808][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.362114][T18720] ? kmsan_set_origin_checked+0x95/0xf0 [ 943.367650][T18720] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 943.373713][T18720] ? _copy_from_user+0x201/0x310 [ 943.378655][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.383845][T18720] __msan_chain_origin+0x50/0x90 [ 943.388787][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.393947][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.398918][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.403437][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.408630][T18720] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 943.414515][T18720] ? kmsan_get_metadata+0x116/0x180 [ 943.419708][T18720] ? kmsan_internal_set_origin+0x75/0xb0 [ 943.425353][T18720] ? __msan_poison_alloca+0xf0/0x120 [ 943.430634][T18720] ? __sys_recvmmsg+0xbb/0x610 [ 943.435388][T18720] ? __sys_recvmmsg+0xbb/0x610 [ 943.440152][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.444836][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.450903][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.457047][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.462245][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.467088][T18720] do_SYSENTER_32+0x73/0x90 [ 943.471582][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.477894][T18720] RIP: 0023:0xf7f65549 [ 943.481943][T18720] Code: Bad RIP value. [ 943.485998][T18720] RSP: 002b:00000000f551d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 943.494401][T18720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 943.502373][T18720] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 943.510330][T18720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.518286][T18720] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 943.526242][T18720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.534209][T18720] Uninit was stored to memory at: [ 943.539226][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.544934][T18720] __msan_chain_origin+0x50/0x90 [ 943.549861][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.554960][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.559899][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.564388][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.569054][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.575108][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.581248][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.586435][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.591272][T18720] do_SYSENTER_32+0x73/0x90 [ 943.595764][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.602065][T18720] [ 943.604375][T18720] Uninit was stored to memory at: [ 943.609387][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.615095][T18720] __msan_chain_origin+0x50/0x90 [ 943.620020][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.625118][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.630039][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.634534][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.639200][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.645257][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.651421][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.656610][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.661446][T18720] do_SYSENTER_32+0x73/0x90 [ 943.665937][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.672238][T18720] [ 943.674548][T18720] Uninit was stored to memory at: [ 943.679570][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.685273][T18720] __msan_chain_origin+0x50/0x90 [ 943.690199][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.695296][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.700217][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.704705][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.709370][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.715423][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.721559][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.726745][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.731582][T18720] do_SYSENTER_32+0x73/0x90 [ 943.736072][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.742375][T18720] [ 943.744684][T18720] Uninit was stored to memory at: [ 943.749700][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.755411][T18720] __msan_chain_origin+0x50/0x90 [ 943.760334][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.765431][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.770352][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.774840][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.779507][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.785571][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.791712][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.796897][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.801733][T18720] do_SYSENTER_32+0x73/0x90 [ 943.806225][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.812526][T18720] [ 943.814836][T18720] Uninit was stored to memory at: [ 943.819845][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.825548][T18720] __msan_chain_origin+0x50/0x90 [ 943.830469][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.835566][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.840497][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.844984][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.849649][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.855718][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.861997][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.867183][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.872020][T18720] do_SYSENTER_32+0x73/0x90 [ 943.876514][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.882817][T18720] [ 943.885127][T18720] Uninit was stored to memory at: [ 943.890311][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.896015][T18720] __msan_chain_origin+0x50/0x90 [ 943.900938][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.906032][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.910957][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.915446][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.920111][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.926264][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 943.932410][T18720] __do_fast_syscall_32+0x2af/0x480 [ 943.937594][T18720] do_fast_syscall_32+0x6b/0xd0 [ 943.942450][T18720] do_SYSENTER_32+0x73/0x90 [ 943.946942][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 943.953329][T18720] [ 943.955641][T18720] Uninit was stored to memory at: [ 943.960649][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 943.966358][T18720] __msan_chain_origin+0x50/0x90 [ 943.971292][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 943.976390][T18720] get_compat_msghdr+0x108/0x2b0 [ 943.981311][T18720] do_recvmmsg+0xdbb/0x22c0 [ 943.985802][T18720] __sys_recvmmsg+0x5dd/0x610 [ 943.990468][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 943.996523][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.002675][T18720] __do_fast_syscall_32+0x2af/0x480 [ 944.007861][T18720] do_fast_syscall_32+0x6b/0xd0 [ 944.012701][T18720] do_SYSENTER_32+0x73/0x90 [ 944.017213][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.023519][T18720] [ 944.025830][T18720] Local variable ----msg_sys@do_recvmmsg created at: [ 944.032486][T18720] do_recvmmsg+0xbf/0x22c0 [ 944.036884][T18720] do_recvmmsg+0xbf/0x22c0 [ 944.288001][T18719] not chained 140000 origins [ 944.292632][T18719] CPU: 1 PID: 18719 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 944.301290][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.311342][T18719] Call Trace: [ 944.314728][T18719] dump_stack+0x21c/0x280 [ 944.319075][T18719] kmsan_internal_chain_origin+0x6f/0x130 [ 944.324800][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.330000][T18719] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.335551][T18719] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 944.341626][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.346830][T18719] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 944.352642][T18719] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 944.358708][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.363912][T18719] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.369459][T18719] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 944.375530][T18719] ? _copy_from_user+0x201/0x310 [ 944.380470][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.385672][T18719] __msan_chain_origin+0x50/0x90 [ 944.390615][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.395752][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.400729][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.405252][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.410457][T18719] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 944.416373][T18719] ? kmsan_get_metadata+0x116/0x180 [ 944.421580][T18719] ? kmsan_internal_set_origin+0x75/0xb0 [ 944.427223][T18719] ? __msan_poison_alloca+0xf0/0x120 [ 944.432514][T18719] ? __sys_recvmmsg+0xbb/0x610 [ 944.437287][T18719] ? __sys_recvmmsg+0xbb/0x610 [ 944.442060][T18719] __sys_recvmmsg+0x5dd/0x610 [ 944.446757][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.452834][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.458988][T18719] __do_fast_syscall_32+0x2af/0x480 [ 944.464207][T18719] do_fast_syscall_32+0x6b/0xd0 [ 944.469063][T18719] do_SYSENTER_32+0x73/0x90 [ 944.473572][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.479897][T18719] RIP: 0023:0xf7f65549 [ 944.483957][T18719] Code: Bad RIP value. [ 944.488017][T18719] RSP: 002b:00000000f553e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 944.496571][T18719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 944.504567][T18719] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 944.512533][T18719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 944.520503][T18719] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 944.528477][T18719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 944.536457][T18719] Uninit was stored to memory at: [ 944.541487][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 944.547210][T18719] __msan_chain_origin+0x50/0x90 [ 944.552158][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.557270][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.562209][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.567228][T18719] __sys_recvmmsg+0x5dd/0x610 [ 944.571905][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.577972][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.584126][T18719] __do_fast_syscall_32+0x2af/0x480 [ 944.589324][T18719] do_fast_syscall_32+0x6b/0xd0 [ 944.594175][T18719] do_SYSENTER_32+0x73/0x90 [ 944.598675][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.605069][T18719] [ 944.607386][T18719] Uninit was stored to memory at: [ 944.612620][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 944.618331][T18719] __msan_chain_origin+0x50/0x90 [ 944.623267][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.628373][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.633303][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.637800][T18719] __sys_recvmmsg+0x5dd/0x610 [ 944.642476][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.648539][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.654794][T18719] __do_fast_syscall_32+0x2af/0x480 [ 944.659991][T18719] do_fast_syscall_32+0x6b/0xd0 [ 944.664839][T18719] do_SYSENTER_32+0x73/0x90 [ 944.669338][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.675647][T18719] [ 944.677990][T18719] Uninit was stored to memory at: [ 944.683012][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 944.688728][T18719] __msan_chain_origin+0x50/0x90 [ 944.693661][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.698771][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.703717][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.708225][T18719] __sys_recvmmsg+0x5dd/0x610 [ 944.712002][T18720] not chained 150000 origins [ 944.712899][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.717489][T18720] CPU: 0 PID: 18720 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 944.723531][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.732167][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.738300][T18719] __do_fast_syscall_32+0x2af/0x480 [ 944.748320][T18720] Call Trace: [ 944.753511][T18719] do_fast_syscall_32+0x6b/0xd0 [ 944.756776][T18720] dump_stack+0x21c/0x280 [ 944.761598][T18719] do_SYSENTER_32+0x73/0x90 [ 944.765910][T18720] kmsan_internal_chain_origin+0x6f/0x130 [ 944.770391][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.776083][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.782371][T18719] [ 944.787549][T18720] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.789844][T18719] Uninit was stored to memory at: [ 944.795373][T18720] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 944.800367][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 944.806408][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.812114][T18719] __msan_chain_origin+0x50/0x90 [ 944.817287][T18720] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 944.822198][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.827980][T18720] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 944.833063][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.839102][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.844023][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.849195][T18720] ? kmsan_set_origin_checked+0x95/0xf0 [ 944.853670][T18719] __sys_recvmmsg+0x5dd/0x610 [ 944.859201][T18720] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 944.863863][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 944.869910][T18720] ? _copy_from_user+0x201/0x310 [ 944.875962][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 944.880874][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.887011][T18719] __do_fast_syscall_32+0x2af/0x480 [ 944.892180][T18720] __msan_chain_origin+0x50/0x90 [ 944.897372][T18719] do_fast_syscall_32+0x6b/0xd0 [ 944.902283][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 944.907106][T18719] do_SYSENTER_32+0x73/0x90 [ 944.912200][T18720] get_compat_msghdr+0x108/0x2b0 [ 944.916669][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 944.921596][T18720] do_recvmmsg+0xdbb/0x22c0 [ 944.927966][T18719] [ 944.932465][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.934758][T18719] Uninit was stored to memory at: [ 944.939941][T18720] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 944.944937][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 944.950810][T18720] ? kmsan_get_metadata+0x116/0x180 [ 944.956501][T18719] __msan_chain_origin+0x50/0x90 [ 944.961670][T18720] ? kmsan_internal_set_origin+0x75/0xb0 [ 944.966580][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 944.972183][T18720] ? __msan_poison_alloca+0xf0/0x120 [ 944.977274][T18719] get_compat_msghdr+0x108/0x2b0 [ 944.982540][T18720] ? __sys_recvmmsg+0xbb/0x610 [ 944.987446][T18719] do_recvmmsg+0xdbb/0x22c0 [ 944.992195][T18720] ? __sys_recvmmsg+0xbb/0x610 [ 944.996779][T18719] __sys_recvmmsg+0x5dd/0x610 [ 945.001527][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.006180][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.010835][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.016867][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.022909][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.029031][T18719] __do_fast_syscall_32+0x2af/0x480 [ 945.035158][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.040326][T18719] do_fast_syscall_32+0x6b/0xd0 [ 945.045498][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.050317][T18719] do_SYSENTER_32+0x73/0x90 [ 945.055143][T18720] do_SYSENTER_32+0x73/0x90 [ 945.059618][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.064096][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.070379][T18719] [ 945.076785][T18720] RIP: 0023:0xf7f65549 [ 945.079078][T18719] Uninit was stored to memory at: [ 945.083120][T18720] Code: Bad RIP value. [ 945.088139][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 945.092169][T18720] RSP: 002b:00000000f551d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 945.097865][T18719] __msan_chain_origin+0x50/0x90 [ 945.106244][T18720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 945.111168][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 945.119108][T18720] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 945.124213][T18719] get_compat_msghdr+0x108/0x2b0 [ 945.132240][T18720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.137151][T18719] do_recvmmsg+0xdbb/0x22c0 [ 945.145104][T18720] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 945.149584][T18719] __sys_recvmmsg+0x5dd/0x610 [ 945.157528][T18720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.162195][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.170139][T18720] Uninit was stored to memory at: [ 945.176186][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.181181][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.187303][T18719] __do_fast_syscall_32+0x2af/0x480 [ 945.192989][T18720] __msan_chain_origin+0x50/0x90 [ 945.198157][T18719] do_fast_syscall_32+0x6b/0xd0 [ 945.203079][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.207900][T18719] do_SYSENTER_32+0x73/0x90 [ 945.212984][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.217461][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.222474][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.228775][T18719] [ 945.233258][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.235554][T18719] Uninit was stored to memory at: [ 945.240316][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.245322][T18719] kmsan_internal_chain_origin+0xad/0x130 [ 945.251379][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.257076][T18719] __msan_chain_origin+0x50/0x90 [ 945.263203][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.268134][T18719] __get_compat_msghdr+0x6db/0x9d0 [ 945.273307][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.278386][T18719] get_compat_msghdr+0x108/0x2b0 [ 945.283211][T18720] do_SYSENTER_32+0x73/0x90 [ 945.288125][T18719] do_recvmmsg+0xdbb/0x22c0 [ 945.292623][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.297098][T18719] __sys_recvmmsg+0x5dd/0x610 [ 945.303388][T18720] [ 945.308168][T18719] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.310461][T18720] Uninit was stored to memory at: [ 945.316514][T18719] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.321510][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.327628][T18719] __do_fast_syscall_32+0x2af/0x480 [ 945.327652][T18719] do_fast_syscall_32+0x6b/0xd0 [ 945.333342][T18720] __msan_chain_origin+0x50/0x90 [ 945.338513][T18719] do_SYSENTER_32+0x73/0x90 [ 945.343338][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.348250][T18719] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.352739][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.357811][T18719] [ 945.364118][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.369024][T18719] Local variable ----msg_sys@do_recvmmsg created at: [ 945.371334][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.375820][T18719] do_recvmmsg+0xbf/0x22c0 [ 945.382576][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.387224][T18719] do_recvmmsg+0xbf/0x22c0 [ 945.391625][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.408398][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.413620][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.418500][T18720] do_SYSENTER_32+0x73/0x90 [ 945.423020][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.429330][T18720] [ 945.431643][T18720] Uninit was stored to memory at: [ 945.436669][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.442387][T18720] __msan_chain_origin+0x50/0x90 [ 945.447315][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.452417][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.457343][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.461834][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.466505][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.472562][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.478708][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.484004][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.488842][T18720] do_SYSENTER_32+0x73/0x90 [ 945.493338][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.499651][T18720] [ 945.501963][T18720] Uninit was stored to memory at: [ 945.506978][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.512683][T18720] __msan_chain_origin+0x50/0x90 [ 945.517690][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.522790][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.527723][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.532228][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.536895][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.543036][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.549176][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.554364][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.559201][T18720] do_SYSENTER_32+0x73/0x90 [ 945.563694][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.569996][T18720] [ 945.572395][T18720] Uninit was stored to memory at: [ 945.577415][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.583124][T18720] __msan_chain_origin+0x50/0x90 [ 945.588055][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.593153][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.598077][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.602567][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.607237][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.613289][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.619430][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.624702][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.629541][T18720] do_SYSENTER_32+0x73/0x90 [ 945.634050][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.640354][T18720] [ 945.642662][T18720] Uninit was stored to memory at: [ 945.647676][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.653399][T18720] __msan_chain_origin+0x50/0x90 [ 945.658334][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.663519][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.668466][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.672955][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.677618][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.683667][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.689803][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.694987][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.699823][T18720] do_SYSENTER_32+0x73/0x90 [ 945.704316][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.710620][T18720] [ 945.712928][T18720] Uninit was stored to memory at: [ 945.717939][T18720] kmsan_internal_chain_origin+0xad/0x130 [ 945.723644][T18720] __msan_chain_origin+0x50/0x90 [ 945.728565][T18720] __get_compat_msghdr+0x6db/0x9d0 [ 945.733668][T18720] get_compat_msghdr+0x108/0x2b0 [ 945.738596][T18720] do_recvmmsg+0xdbb/0x22c0 [ 945.743082][T18720] __sys_recvmmsg+0x5dd/0x610 [ 945.747747][T18720] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 945.753800][T18720] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 945.759940][T18720] __do_fast_syscall_32+0x2af/0x480 [ 945.765126][T18720] do_fast_syscall_32+0x6b/0xd0 [ 945.769963][T18720] do_SYSENTER_32+0x73/0x90 [ 945.774458][T18720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 945.780760][T18720] [ 945.783070][T18720] Local variable ----msg_sys@do_recvmmsg created at: [ 945.789725][T18720] do_recvmmsg+0xbf/0x22c0 [ 945.794124][T18720] do_recvmmsg+0xbf/0x22c0 15:35:13 executing program 2: 15:35:13 executing program 1: 15:35:13 executing program 5: 15:35:13 executing program 4: 15:35:13 executing program 0: 15:35:13 executing program 3: 15:35:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d8551d"}, 0x0, 0x0, @planes=0x0}) 15:35:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a00000401a10001810040fb03001800040fda1b40d819a906000500000f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) 15:35:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x80802, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@echo=0x4d0], 0x4) 15:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080), 0x10) 15:35:14 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000000, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x7}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 15:35:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x22a}], 0x1) 15:35:15 executing program 4: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 15:35:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4), 0x1c) 15:35:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 15:35:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "66e5abd22b7307be"}) 15:35:15 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:35:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 15:35:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="66f26df30f5128150088c15d0000660f38813066b9800000c00f326635008000000f30b8ff0f8ed066b93208000066b88c65000066ba000000000f30b84f088ee80fc488c92300", 0x47}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5b]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:35:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)=':(^\x00', 0x4, 0x0) 15:35:15 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb03}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 15:35:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 15:35:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8940, &(0x7f00000000c0)={@loopback={0x100000000000000}}) 15:35:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 15:35:16 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000400)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 15:35:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000060bc7d94004c46a182787817a96afacb4804ba34b88ceed951"], 0xfdef) 15:35:17 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000500)={0xa, 0x0, 0x0, @remote, 0x5d0}, 0x1c, 0x0, 0x0, &(0x7f0000004e80)=[@tclass={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}], 0x30}}], 0x1, 0x0) 15:35:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 15:35:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140), 0x8) 15:35:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) readlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/145, 0x91) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 15:35:18 executing program 4: io_setup(0x22, &(0x7f00000003c0)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x0, 0x0, r1, 0x0}]) 15:35:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='big_key\x00', 0x0, &(0x7f0000000180)="10", 0xfffff, r0) 15:35:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x368, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x3, 0x0, {[{{@uncond=[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x1c8, 0x1f8, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'veth0_to_hsr\x00', {0x8, 0x0, 0x41, 0x0, 0x0, 0x5, 0x44, 0x7}}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae7bbe9998a260a8f00a30e54d356de8911e05d607ed2184b8a7d2f9d2e"}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 15:35:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x8969196e9d577b81}, 0x14}}, 0x0) 15:35:18 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x3f, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x110, 0x9}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:35:19 executing program 3: socket(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0x90) 15:35:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r1, 0x4) [ 951.663273][ T8716] Bluetooth: hci5: command 0x0405 tx timeout 15:35:19 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffabdeff844105001a"], 0x38}}, 0x0) r0 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x2e7, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1, 0xe883, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x20) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="56b5008c564e48d0c2783460e7c0b955986c7b90557fde342670f1fe1fad5d21f856118cc33be6a46f4a344916e952a1155cbe4ca93b791a76cd1c130288ebe57b53fb3ce631da732152390595bb3728568b2bdfff00005a4564d3b78d6e9fd92d8006c57781f883090a6723affb481f7dbfb85e5b4d2412e81dfb97c7a416d5d6dc6b68a1be1df8cdbdf10a175df0ed863004000000157162e045b7bc9272a3fa4bd46eceb81243ac3639ce80729cb3e3fe", @ANYRES16=r4, @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00022dbd7000fddbdf2512000040"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x200000c4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r4, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x649}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x16}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x2, 0x70bd25, 0xff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4680}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250f00000008002b0002000000080013000400000008003c0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) 15:35:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 15:35:19 executing program 4: r0 = gettid() clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 15:35:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600008000000a00f500feffffff800000007f6699001d00000000d6dbb905d1f86beb0000000d000800e0020000b89cc4b2bd01a12ba71996d8ee00000e809ac1594f95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084adbe40039649673b73383b717e127c6a36da871a86cc8c0300000000000002000100000000000000060080ffffff05000500000000000a"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400006a, 0x0) 15:35:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 15:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x0, [0xc0000101, 0x0, 0x0, 0x0, 0xc0010015]}) dup2(r5, r2) 15:35:20 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=[{'IMIX', @void}, {'LINE1', @val={' \'', 'CD Capture', '\' '}}], 0x2d) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 15:35:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) [ 952.815779][T18928] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 15:35:20 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x23}, 0x200000cc, &(0x7f0000000340)={0x0, 0x400300}}, 0x0) [ 952.882005][T18934] ALSA: mixer_oss: invalid OSS volume '' [ 952.889776][T18934] ALSA: mixer_oss: invalid OSS volume '' [ 953.014748][T18944] ALSA: mixer_oss: invalid OSS volume '' [ 953.022862][T18944] ALSA: mixer_oss: invalid OSS volume '' 15:35:21 executing program 5: unshare(0x20000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) 15:35:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x2000002) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000001ac0), 0x0) pipe2(&(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 15:35:21 executing program 2: socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x68, 0x0) 15:35:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 15:35:21 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(0xffffffffffffffff, 0x1) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r2, r1) 15:35:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) [ 953.670103][T18963] new mount options do not match the existing superblock, will be ignored [ 953.700343][T18964] new mount options do not match the existing superblock, will be ignored 15:35:21 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) 15:35:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x2000002) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000001ac0), 0x0) pipe2(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000180)={0x1c0000000, 0x0, "a78a7ec0d6f4fcac93bba95c8822a54e800297c84a718f1781da6401f65dc3b7", 0x498000000000000, 0x48, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x1a, [0x15, 0x3f, 0x4, 0x6]}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 15:35:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000011000000060028000200000008000300", @ANYRES32=r2], 0x24}}, 0x0) 15:35:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000", @ANYRES16=r0], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x4000080) 15:35:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000a00)=""/4096) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x101200, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000200)=0x2) umount2(&(0x7f0000000140)='./file0\x00', 0x1) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x82) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2, 0x68, 0x0) 15:35:22 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000013001d040000000000000000020002c0", @ANYRES32=0x0, @ANYBLOB="000100000000000008000a0010000000140003006970766c616e31"], 0x3c}, 0x1, 0x5e}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0xd2ef42ad08e41485) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) 15:35:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000480)=""/116) 15:35:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x109402) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, 0x0, 0x6) [ 954.948275][T18997] new mount options do not match the existing superblock, will be ignored 15:35:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) 15:35:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xe6, 0x9f, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000040)='Z', 0x359}, {&(0x7f0000000080)='\b', 0x1}], 0x31d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x2b0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}, @IFLA_VF_PORTS={0x274, 0x18, 0x0, 0x1, [{0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x12, 0x2, '%$\\/7)\\&,&\xd1**\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3dc8dfdc6481373a33a5f159be79d2e1"}, @IFLA_PORT_PROFILE={0x8, 0x2, '-.-\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2b22a9ecbc4cc891a958c7b900d7f028"}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '-$*\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d26a49dc65e5464c6a237825961cfd07"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2df55c6d3ce7b98e56593c908f0820f3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '))\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xffff0000}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4a7e643a272289fc2571300004a0d366"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c537428aa961633cc12ee1f746079ac8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "94852df0bb1ea360130dac018ca692d8"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5510bb04c12b7026de39d1422358cfce"}, @IFLA_PORT_VF={0x8, 0x1, 0x100}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x18}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c26369ebd4977ade3a1da42e0d56877e"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ebcb1d2fb7e7a9622305be09c48d619"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xec}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b16ba1b8f774442287e1aac661d558c9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c1f047b71f4eadb7ddb4a94a3f4d2219"}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b1e6cbdaefc5b62f13f4180be6b8ede7"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f907cf4616854f947db51686eaccbfc9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e9e91ce4fe40e01037da8401269c1ae1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0e4398182cc87743e76b6562aa009c63"}, @IFLA_PORT_PROFILE={0xc, 0x2, '\'{\x91)%-!\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9480613677a8f7a1ed58b75d98657af2"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b579764f86f7fe6ad94b6b9f68e949e7"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'gretap\x00'}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xa) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r8}}, {{@in6=@private2={0xfc, 0x2, [], 0x1}}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, 0xe8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv6_newroute={0xd4, 0x18, 0x101, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}, @RTA_MULTIPATH={0xc, 0x9, {0x959, 0xc, 0x3}}, @RTA_METRICS={0x80, 0x8, 0x0, 0x1, "170503f811068dcc337684cb99e2c0bc4d4ed022ceb6a89cd24a09131b64da825aa13dc3f4cfd54aacdf365ebe52c6fbe8922bafcd3c6be4827aecd5b49050218cb3cb0fc58961848f46d6bb07f40e490bd07ed43db659c636f3e84680541e9c1e3634abf357022a55f23aef73cd6fada91fac8038c50cae71271f8f"}, @RTA_UID={0x8, 0x19, r8}, @RTA_UID={0x8}, @RTA_ENCAP_TYPE={0x6}]}, 0xd4}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x3, "3b826d1483af2af3"}) [ 955.372833][T19004] device ipvlan1 entered promiscuous mode [ 955.401104][T19004] team0: Device ipvlan1 failed to register rx_handler [ 955.418433][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:35:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 15:35:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffff000001a5, 0x0, 0x0) [ 957.058246][T19004] team0: Device ipvlan1 failed to register rx_handler 15:35:25 executing program 5: 15:35:25 executing program 4: r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(r0, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000000000000000000000000000000000000000000080000000016000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed00"/192]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x11, 0x1, 0xe97, &(0x7f00000001c0)}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x31f1094c90707f40) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x24008000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15:35:25 executing program 1: 15:35:25 executing program 3: 15:35:25 executing program 2: 15:35:26 executing program 0: 15:35:26 executing program 3: 15:35:26 executing program 1: 15:35:26 executing program 2: 15:35:26 executing program 4: 15:35:26 executing program 5: 15:35:26 executing program 2: 15:35:26 executing program 5: 15:35:26 executing program 4: 15:35:26 executing program 1: 15:35:26 executing program 3: 15:35:27 executing program 0: 15:35:27 executing program 2: 15:35:27 executing program 5: 15:35:27 executing program 4: 15:35:27 executing program 3: 15:35:27 executing program 1: 15:35:27 executing program 0: 15:35:27 executing program 2: 15:35:27 executing program 5: 15:35:27 executing program 1: 15:35:27 executing program 3: 15:35:27 executing program 4: 15:35:28 executing program 0: 15:35:28 executing program 2: 15:35:28 executing program 5: 15:35:28 executing program 3: 15:35:28 executing program 4: 15:35:28 executing program 1: 15:35:28 executing program 0: 15:35:28 executing program 2: 15:35:28 executing program 3: 15:35:29 executing program 5: 15:35:29 executing program 4: 15:35:29 executing program 1: 15:35:29 executing program 0: 15:35:29 executing program 2: 15:35:29 executing program 3: 15:35:29 executing program 4: 15:35:29 executing program 5: 15:35:29 executing program 1: 15:35:29 executing program 0: 15:35:29 executing program 2: 15:35:30 executing program 3: 15:35:30 executing program 4: 15:35:30 executing program 5: 15:35:30 executing program 2: 15:35:30 executing program 1: 15:35:30 executing program 0: 15:35:30 executing program 4: 15:35:30 executing program 3: 15:35:30 executing program 2: 15:35:30 executing program 5: 15:35:31 executing program 1: 15:35:31 executing program 0: 15:35:31 executing program 4: 15:35:31 executing program 3: 15:35:31 executing program 2: 15:35:31 executing program 5: 15:35:31 executing program 1: 15:35:31 executing program 4: 15:35:31 executing program 0: 15:35:31 executing program 3: 15:35:31 executing program 2: 15:35:32 executing program 1: 15:35:32 executing program 4: 15:35:32 executing program 0: 15:35:32 executing program 5: 15:35:32 executing program 3: 15:35:32 executing program 2: 15:35:32 executing program 4: 15:35:32 executing program 1: 15:35:32 executing program 5: 15:35:32 executing program 0: 15:35:33 executing program 3: 15:35:33 executing program 2: 15:35:33 executing program 4: 15:35:33 executing program 1: 15:35:33 executing program 0: 15:35:33 executing program 5: 15:35:33 executing program 3: 15:35:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) semctl$SETALL(0x0, 0x0, 0x12, &(0x7f0000000280)) 15:35:33 executing program 2: getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) sendfile(r2, r1, 0x0, 0x265) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) 15:35:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x14) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r2, r1) 15:35:33 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="6902020039000535d25a80648c63940d0324fc60100002400a000200051a82c137153e670435018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 15:35:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x100, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, &(0x7f0000000300)="92"}) 15:35:34 executing program 5: [ 966.308748][T19160] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 966.317093][T19160] netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.0'. [ 966.577914][T19169] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 966.586219][T19169] netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.0'. [ 966.605517][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.613385][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 15:35:34 executing program 4: [ 966.621098][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.628707][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.636477][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.644202][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.651944][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.659561][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.667351][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.675039][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.682719][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.690306][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.698040][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.705732][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.713383][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.721046][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.728648][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.736302][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.743951][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.751614][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.759227][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 966.766851][ T9059] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 15:35:34 executing program 5: 15:35:34 executing program 3: 15:35:35 executing program 0: 15:35:35 executing program 4: [ 967.426615][ T9059] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on %z5 15:35:35 executing program 3: 15:35:35 executing program 5: [ 968.632557][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.640339][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.648226][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.655985][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.663726][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.671444][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.679061][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.686843][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.694754][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.702560][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.710190][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.717905][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.725673][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.733369][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.741203][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.748786][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.756675][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.764428][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.773064][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.780671][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.788411][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.796124][ T3220] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 968.832215][ T3220] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on %z5 15:35:37 executing program 2: getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) sendfile(r2, r1, 0x0, 0x265) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) 15:35:37 executing program 0: 15:35:37 executing program 4: 15:35:37 executing program 5: 15:35:37 executing program 3: 15:35:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000000c0)=0x14) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r2, r1) 15:35:38 executing program 3: [ 970.134600][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.142390][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.149979][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.158342][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.166066][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.173807][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.181517][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.189226][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.196950][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.204794][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.212622][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.220216][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.227930][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.235670][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.243400][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.251072][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.258675][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.266468][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.274210][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 15:35:38 executing program 5: 15:35:38 executing program 4: 15:35:38 executing program 0: [ 970.281916][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.289496][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.297220][ T3220] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 970.358911][ T3220] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on %z5 15:35:38 executing program 0: 15:35:38 executing program 5: 15:35:40 executing program 2: getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) sendfile(r2, r1, 0x0, 0x265) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) 15:35:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x89a0, &(0x7f0000000600)=@buf={0x3a}) 15:35:40 executing program 3: keyctl$link(0x16, 0x0, 0xfffffffffffffffb) 15:35:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') 15:35:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 15:35:40 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') getdents64(r0, &(0x7f0000000500)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 15:35:41 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 15:35:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x81}, r2, 0xd, r1, 0x5) openat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) write$tun(r0, &(0x7f0000001a40)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "4fa18e", 0x1150, 0x2f, 0x0, @private1, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46]}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa1, 0x0, [], "71fdb663be8aabb25fa7749fd62c9770c4b5556c7741f5589f6036ba5cc947fbe5170839e1eb6eda4d8339655e4346cfe0130eb6ba47880e133128082691c7a80a0c32dfa734821a2c1d34ebfee30478aa0291f840c59b26ad680d16faa06fbad091ca6d5d004aa40f2f8a2b8c338752dbaa65bcde9e2344b1c13a40db95856df9ee87fee61a5c21c689848289873d5bfbb99af20dcd7213eea85195c21d09fdf3"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x0]}, {}, {}, {0x8, 0x6558, 0x0, "0dbbf447f9ec8d1338fe5e0e7c7cba4aaedb3503848094318e8c626ea8ef496926dd5e88fd34f5c8fef8b05d4a4d567939607c4dd56748927afe0e81c099d9073a7ac281d0eef613194ef6c2f2f680fcb9ffa66de4566bb0d7d2acf306d68abe4c58478ad038eeb8e9ba30b7fb9fc1eecd4561bb2bca68"}}}}}, 0x20002bc2) 15:35:41 executing program 4: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1ff) 15:35:41 executing program 5: r0 = socket(0x1, 0x80002, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 15:35:41 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x0, 0x0, 0x0, "0000150cdd00"}}) 15:35:41 executing program 4: r0 = socket(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) 15:35:44 executing program 2: getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x6, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ipv6_route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) sendfile(r2, r1, 0x0, 0x265) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) 15:35:44 executing program 5: clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:35:44 executing program 0: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x3, 0x0, 0x0) 15:35:44 executing program 1: r0 = syz_init_net_socket$x25(0x3, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 15:35:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 15:35:44 executing program 4: openat$nullb(0xffffffffffffff9c, 0x0, 0x60ff, 0x0) 15:35:44 executing program 4: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0xc0189436, &(0x7f0000000040)={@none}) 15:35:44 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x12061, 0x0, 0x0) 15:35:44 executing program 3: semget$private(0x0, 0x0, 0x0) 15:35:44 executing program 1: keyctl$set_reqkey_keyring(0x2, 0x0) 15:35:44 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x107, 0x5, 0x0, 0x0) 15:35:44 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x3a) bind$nfc_llcp(r0, &(0x7f0000000080)={0xa, 0x0, 0x80ff, 0x1, 0xfc, 0x0, "ad95dd071d019677008583d06dec5ecdb6ab5f8e230b03356c7d223eb8d70a2a61ab16e19cbc32c96d8205446af53812875b7155db27572e7382cafbf87ed0"}, 0x60) 15:35:46 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)) 15:35:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 15:35:46 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x1c, 0x531000, 0x0) 15:35:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x6, 0x9}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:35:46 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10100000000000008400000004"], 0x1160}, 0x0) 15:35:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, 0x0) 15:35:46 executing program 0: r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0xb, 0x0, 0x300) 15:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) 15:35:46 executing program 3: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x84, 0x1c, 0x0, &(0x7f0000000300)=0x11) 15:35:46 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x14, 0x0, 0x300) 15:35:46 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x110, 0x2, 0x0, 0x0) 15:35:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0xffffffffffffffff) 15:35:47 executing program 0: fanotify_mark(0xffffffffffffffff, 0x2, 0x2b, 0xffffffffffffffff, 0x0) 15:35:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_submit(0x0, 0x0, 0x0) 15:35:47 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 15:35:47 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x70, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX]}, 0xc0}}, 0x0) 15:35:47 executing program 5: r0 = socket(0x18, 0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x111, 0x40, 0x0, 0x0) 15:35:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000007c0), 0x4) 15:35:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)=0x3) 15:35:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b) 15:35:48 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)) ioctl$PPPIOCNEWUNIT(r0, 0x80047441, 0x0) 15:35:48 executing program 2: sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) 15:35:48 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0285629, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x531002]}) 15:35:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xff) 15:35:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x3) 15:35:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x74, 0x0, &(0x7f0000000100)=0x83) 15:35:49 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x19, 0x0, 0x300) 15:35:49 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x40840) 15:35:49 executing program 5: ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) 15:35:49 executing program 4: r0 = socket(0x23, 0x2, 0x0) bind$rds(r0, &(0x7f0000001400)={0x23, 0x4e22, @dev}, 0x10) 15:35:49 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80001, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 15:35:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='#\'%,((\x00', &(0x7f0000000080)='./file0\x00', r1) 15:35:49 executing program 5: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 15:35:49 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="800031"], 0x150}, 0x0) 15:35:49 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000000), 0x4) 15:35:49 executing program 4: r0 = syz_init_net_socket$x25(0x3, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e3, &(0x7f0000000000)={'veth0_to_team\x00'}) 15:35:49 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) [ 982.055256][ T8714] kworker/dying (8714) used greatest stack depth: 3368 bytes left 15:35:50 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5421, &(0x7f0000000480)) 15:35:50 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 15:35:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x90) 15:35:50 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10d, 0x3, 0x0, 0x0) 15:35:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae46, &(0x7f0000000000)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6, 0x2]}) 15:35:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae46, &(0x7f0000000000)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x6, 0x2]}) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 15:35:50 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 15:35:50 executing program 5: r0 = socket(0x1, 0x1, 0x0) bind$netlink(r0, &(0x7f0000000040), 0xc) [ 982.749362][T19402] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app 15:35:50 executing program 2: r0 = socket(0xa, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x3a}, 0x80, 0x0}, 0x0) 15:35:50 executing program 3: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 15:35:51 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 15:35:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000100)=0x3) 15:35:51 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 15:35:51 executing program 2: r0 = socket(0x25, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 15:35:51 executing program 5: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x84, 0x77, 0x0, 0x0) 15:35:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1c, 0x2012, r0, 0x0) 15:35:51 executing program 0: connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 15:35:51 executing program 1: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0xfffffffffffffed3) 15:35:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)=0x3) 15:35:52 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f0000000000), 0x4) 15:35:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1e, 0x0, &(0x7f0000000100)=0x83) 15:35:52 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x0) 15:35:52 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f0000000000)="05d6ce178b7b709adc6b060000326fc1e3d31ce24ecc3c7e8fda35b5b8990f51f262b7bbaf25aa965dd0f6f641495e6f516d01a89d132fceed4018b6bf46dc8d260967c8e088c98b5611b162e64323b728c68c57", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb6, 0x0, 0x0}, 0x40) 15:35:52 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x24, &(0x7f0000000000)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, 0xe8) 15:35:52 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 15:35:52 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x11000)=nil, 0x4000) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000021c0)) 15:35:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)=0x3) 15:35:52 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:35:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 15:35:52 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 15:35:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x2d, 0xa}, [@call={0x27}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 15:35:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x7, 0x0, 0x0) 15:35:53 executing program 5: openat$nullb(0xffffffffffffff9c, 0x0, 0x4f4000, 0x0) 15:35:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000600)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4142, 0x0) 15:35:53 executing program 3: r0 = socket(0x1, 0x1, 0x0) bind$netlink(r0, 0x0, 0x0) 15:35:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000007700)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {}, [{0x4}, {0x4}, {0x30, 0x1, [@m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 15:35:53 executing program 2: r0 = socket(0x1e, 0x80002, 0x0) recvfrom$ax25(r0, &(0x7f00000000c0)=""/209, 0xd1, 0x12040, 0x0, 0x0) 15:35:53 executing program 5: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x81) 15:35:53 executing program 3: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x84, 0x7c, 0x0, &(0x7f0000000300)=0x11) 15:35:53 executing program 4: r0 = socket(0x2, 0x3, 0x4) bind$ax25(r0, 0x0, 0x0) 15:35:54 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x1) 15:35:54 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0xfffffe8a) 15:35:54 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000100)=@buf="edfd"}, 0x20) 15:35:54 executing program 5: keyctl$set_reqkey_keyring(0x5, 0x0) 15:35:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x2d, 0xa}, [@call={0x27}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) 15:35:54 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendto$l2tp(r0, &(0x7f0000000000)="793e981aa55ff9ff", 0x33c00, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$l2tp(r0, &(0x7f0000000180)="ef", 0x1, 0xfc, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) 15:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000e2178f"], 0x18}}, 0x0) 15:35:54 executing program 0: r0 = socket(0x26, 0x5, 0x0) bind$bt_hci(r0, 0x0, 0x0) 15:35:54 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x35, 0x0, 0x300) 15:35:55 executing program 5: r0 = socket(0x15, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 15:35:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/3) 15:35:55 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x29, 0x48, 0x0, 0x0) 15:35:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x58}}, 0x0) 15:35:55 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x84, 0x18, 0x0, &(0x7f0000000300)=0x11) 15:35:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000140)='E', 0x1}], 0x1, &(0x7f0000001600)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x205}}], 0x30}, 0x0) 15:35:55 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 15:35:55 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x331100, 0x0) 15:35:56 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) 15:35:56 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket(0x2b, 0x1, 0x4) 15:35:56 executing program 5: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 15:35:56 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44871, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) 15:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP_DADDR={0x8}]}, 0x44}}, 0x0) 15:35:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf71731", 0x69}, {&(0x7f0000001b40)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b198e5032c69cf8ebe9d42dd43d2f19d49ebb5e33cf00ec91a7", 0x5e}, {&(0x7f00000004c0)="8dbf", 0x2}], 0x3}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) 15:35:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) 15:35:56 executing program 3: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 15:35:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) 15:35:56 executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000845) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='f', 0x11fffff9f}], 0x8, 0x0, 0x0, 0xf00}, 0x7ffff) 15:35:56 executing program 4: 15:35:57 executing program 5: 15:35:57 executing program 1: [ 989.775960][T19571] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:57 executing program 5: [ 989.915748][T19570] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:57 executing program 4: [ 989.998615][T19571] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:58 executing program 1: 15:35:58 executing program 0: 15:35:58 executing program 3: 15:35:58 executing program 2: 15:35:58 executing program 1: 15:35:58 executing program 4: 15:35:58 executing program 5: 15:35:58 executing program 0: 15:35:58 executing program 3: 15:35:58 executing program 2: 15:35:59 executing program 5: 15:35:59 executing program 1: 15:35:59 executing program 4: 15:35:59 executing program 0: 15:35:59 executing program 3: 15:35:59 executing program 2: 15:35:59 executing program 1: 15:35:59 executing program 5: 15:35:59 executing program 4: 15:35:59 executing program 0: 15:35:59 executing program 3: 15:36:00 executing program 5: 15:36:00 executing program 2: 15:36:00 executing program 1: 15:36:00 executing program 4: 15:36:00 executing program 0: 15:36:00 executing program 3: 15:36:00 executing program 5: 15:36:00 executing program 2: 15:36:00 executing program 1: 15:36:00 executing program 4: 15:36:00 executing program 0: 15:36:00 executing program 3: 15:36:01 executing program 5: 15:36:01 executing program 1: 15:36:01 executing program 2: 15:36:01 executing program 4: 15:36:01 executing program 0: 15:36:01 executing program 3: 15:36:01 executing program 5: 15:36:01 executing program 1: 15:36:01 executing program 2: 15:36:02 executing program 4: 15:36:02 executing program 3: 15:36:02 executing program 0: 15:36:02 executing program 5: 15:36:02 executing program 1: 15:36:02 executing program 2: 15:36:02 executing program 3: 15:36:02 executing program 0: 15:36:02 executing program 4: 15:36:02 executing program 1: 15:36:02 executing program 2: 15:36:03 executing program 5: 15:36:03 executing program 3: 15:36:03 executing program 0: 15:36:03 executing program 4: 15:36:03 executing program 1: 15:36:03 executing program 2: 15:36:03 executing program 5: 15:36:03 executing program 3: 15:36:03 executing program 1: 15:36:03 executing program 4: 15:36:04 executing program 0: 15:36:04 executing program 2: 15:36:04 executing program 5: 15:36:04 executing program 3: 15:36:04 executing program 1: 15:36:04 executing program 0: 15:36:04 executing program 4: 15:36:04 executing program 2: 15:36:04 executing program 5: 15:36:04 executing program 1: 15:36:05 executing program 4: 15:36:05 executing program 3: 15:36:05 executing program 0: 15:36:05 executing program 2: 15:36:05 executing program 1: 15:36:05 executing program 5: 15:36:05 executing program 4: 15:36:05 executing program 0: 15:36:05 executing program 3: 15:36:06 executing program 2: 15:36:06 executing program 5: 15:36:06 executing program 1: 15:36:06 executing program 0: 15:36:06 executing program 4: 15:36:06 executing program 3: 15:36:06 executing program 5: 15:36:06 executing program 1: 15:36:06 executing program 2: 15:36:06 executing program 0: 15:36:06 executing program 4: 15:36:06 executing program 3: 15:36:07 executing program 5: 15:36:07 executing program 1: 15:36:07 executing program 2: 15:36:07 executing program 0: 15:36:07 executing program 3: 15:36:07 executing program 4: 15:36:07 executing program 1: 15:36:07 executing program 5: 15:36:07 executing program 2: 15:36:07 executing program 0: 15:36:08 executing program 3: 15:36:08 executing program 4: 15:36:08 executing program 2: 15:36:08 executing program 0: 15:36:08 executing program 1: 15:36:08 executing program 5: 15:36:08 executing program 4: 15:36:08 executing program 3: 15:36:09 executing program 2: 15:36:09 executing program 0: 15:36:09 executing program 1: 15:36:09 executing program 5: socketpair(0x1e, 0x804, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_udp_int(r0, 0x6, 0x0, 0x0, 0x0) 15:36:09 executing program 4: 15:36:09 executing program 3: 15:36:09 executing program 2: 15:36:09 executing program 0: 15:36:09 executing program 1: 15:36:09 executing program 5: 15:36:09 executing program 4: 15:36:09 executing program 3: 15:36:10 executing program 0: 15:36:10 executing program 2: 15:36:10 executing program 1: 15:36:10 executing program 5: 15:36:10 executing program 4: 15:36:10 executing program 3: 15:36:10 executing program 2: 15:36:10 executing program 1: 15:36:10 executing program 0: 15:36:10 executing program 5: 15:36:11 executing program 4: 15:36:11 executing program 3: 15:36:11 executing program 2: 15:36:11 executing program 1: 15:36:11 executing program 0: 15:36:11 executing program 5: 15:36:11 executing program 4: 15:36:11 executing program 3: 15:36:11 executing program 1: 15:36:11 executing program 2: 15:36:11 executing program 0: 15:36:12 executing program 4: 15:36:12 executing program 5: 15:36:12 executing program 1: 15:36:12 executing program 3: 15:36:12 executing program 0: 15:36:12 executing program 2: 15:36:12 executing program 5: 15:36:12 executing program 4: 15:36:12 executing program 1: 15:36:12 executing program 3: 15:36:12 executing program 0: 15:36:13 executing program 2: 15:36:13 executing program 5: 15:36:13 executing program 4: 15:36:13 executing program 1: 15:36:13 executing program 3: 15:36:13 executing program 0: 15:36:13 executing program 2: 15:36:13 executing program 5: 15:36:13 executing program 4: 15:36:13 executing program 1: 15:36:14 executing program 3: 15:36:14 executing program 0: 15:36:14 executing program 2: 15:36:14 executing program 1: 15:36:14 executing program 4: 15:36:14 executing program 5: 15:36:14 executing program 3: 15:36:14 executing program 0: 15:36:14 executing program 2: 15:36:14 executing program 1: 15:36:15 executing program 4: 15:36:15 executing program 5: 15:36:15 executing program 3: 15:36:15 executing program 0: 15:36:15 executing program 2: 15:36:15 executing program 1: 15:36:15 executing program 4: 15:36:15 executing program 5: 15:36:16 executing program 4: 15:36:16 executing program 2: 15:36:16 executing program 3: 15:36:16 executing program 0: 15:36:16 executing program 5: 15:36:16 executing program 1: 15:36:16 executing program 2: 15:36:16 executing program 4: 15:36:16 executing program 1: 15:36:16 executing program 3: 15:36:16 executing program 0: 15:36:17 executing program 5: 15:36:17 executing program 2: 15:36:17 executing program 4: 15:36:17 executing program 3: 15:36:17 executing program 0: 15:36:17 executing program 1: 15:36:17 executing program 5: 15:36:17 executing program 2: 15:36:17 executing program 4: 15:36:18 executing program 0: 15:36:18 executing program 1: 15:36:18 executing program 3: 15:36:18 executing program 5: 15:36:18 executing program 2: 15:36:18 executing program 4: 15:36:18 executing program 0: 15:36:18 executing program 1: 15:36:18 executing program 3: 15:36:18 executing program 5: 15:36:18 executing program 4: 15:36:18 executing program 2: 15:36:19 executing program 0: 15:36:19 executing program 1: 15:36:19 executing program 3: 15:36:19 executing program 5: 15:36:19 executing program 4: 15:36:19 executing program 2: 15:36:19 executing program 0: 15:36:19 executing program 1: 15:36:19 executing program 3: 15:36:19 executing program 5: 15:36:20 executing program 4: 15:36:20 executing program 2: 15:36:20 executing program 1: 15:36:20 executing program 0: 15:36:20 executing program 3: 15:36:20 executing program 5: 15:36:20 executing program 4: 15:36:20 executing program 2: 15:36:20 executing program 0: 15:36:20 executing program 1: 15:36:20 executing program 5: 15:36:20 executing program 3: 15:36:21 executing program 4: 15:36:21 executing program 2: 15:36:21 executing program 0: 15:36:21 executing program 1: 15:36:21 executing program 3: 15:36:21 executing program 5: 15:36:21 executing program 4: 15:36:21 executing program 2: 15:36:21 executing program 1: 15:36:21 executing program 0: 15:36:22 executing program 3: 15:36:22 executing program 5: 15:36:22 executing program 4: 15:36:22 executing program 2: 15:36:22 executing program 1: 15:36:22 executing program 0: 15:36:22 executing program 3: 15:36:22 executing program 5: 15:36:22 executing program 4: 15:36:22 executing program 2: 15:36:22 executing program 1: 15:36:23 executing program 0: 15:36:23 executing program 3: 15:36:23 executing program 5: 15:36:23 executing program 1: 15:36:23 executing program 4: 15:36:23 executing program 2: 15:36:23 executing program 0: 15:36:23 executing program 3: 15:36:23 executing program 5: 15:36:23 executing program 1: 15:36:23 executing program 2: 15:36:23 executing program 4: 15:36:24 executing program 0: 15:36:24 executing program 3: 15:36:24 executing program 5: 15:36:24 executing program 1: 15:36:24 executing program 4: 15:36:24 executing program 2: 15:36:24 executing program 3: 15:36:24 executing program 5: 15:36:24 executing program 0: 15:36:24 executing program 2: 15:36:25 executing program 1: 15:36:25 executing program 3: 15:36:25 executing program 4: 15:36:25 executing program 5: 15:36:25 executing program 0: 15:36:25 executing program 2: 15:36:25 executing program 4: 15:36:25 executing program 1: 15:36:25 executing program 3: 15:36:25 executing program 0: 15:36:25 executing program 2: 15:36:26 executing program 5: 15:36:26 executing program 1: 15:36:26 executing program 4: 15:36:26 executing program 3: 15:36:26 executing program 0: 15:36:26 executing program 2: 15:36:26 executing program 5: 15:36:26 executing program 1: 15:36:26 executing program 4: 15:36:26 executing program 3: 15:36:26 executing program 0: 15:36:27 executing program 2: 15:36:27 executing program 5: 15:36:27 executing program 4: 15:36:27 executing program 1: 15:36:27 executing program 0: 15:36:27 executing program 3: 15:36:27 executing program 2: 15:36:27 executing program 5: 15:36:27 executing program 4: 15:36:28 executing program 1: 15:36:28 executing program 0: 15:36:28 executing program 3: 15:36:28 executing program 2: 15:36:28 executing program 5: 15:36:28 executing program 4: 15:36:28 executing program 0: 15:36:28 executing program 1: 15:36:28 executing program 3: 15:36:28 executing program 2: 15:36:28 executing program 5: 15:36:29 executing program 4: 15:36:29 executing program 1: 15:36:29 executing program 0: 15:36:29 executing program 3: 15:36:29 executing program 2: 15:36:29 executing program 5: 15:36:29 executing program 4: 15:36:29 executing program 1: 15:36:29 executing program 0: 15:36:29 executing program 3: 15:36:29 executing program 2: 15:36:30 executing program 5: 15:36:30 executing program 4: 15:36:30 executing program 1: 15:36:30 executing program 0: 15:36:30 executing program 2: 15:36:30 executing program 3: 15:36:30 executing program 5: 15:36:30 executing program 4: 15:36:30 executing program 1: 15:36:30 executing program 0: 15:36:31 executing program 2: 15:36:31 executing program 3: 15:36:31 executing program 1: 15:36:31 executing program 5: 15:36:31 executing program 4: 15:36:31 executing program 0: 15:36:31 executing program 2: 15:36:31 executing program 3: 15:36:31 executing program 1: 15:36:31 executing program 5: 15:36:31 executing program 0: 15:36:32 executing program 4: 15:36:32 executing program 2: 15:36:32 executing program 1: 15:36:32 executing program 3: 15:36:32 executing program 5: 15:36:32 executing program 0: 15:36:32 executing program 2: 15:36:32 executing program 4: 15:36:32 executing program 3: 15:36:32 executing program 1: 15:36:33 executing program 1: 15:36:33 executing program 5: 15:36:33 executing program 2: 15:36:33 executing program 4: 15:36:33 executing program 0: 15:36:33 executing program 3: 15:36:34 executing program 5: 15:36:34 executing program 1: 15:36:34 executing program 0: 15:36:34 executing program 4: 15:36:34 executing program 2: 15:36:34 executing program 3: 15:36:34 executing program 5: 15:36:34 executing program 1: 15:36:34 executing program 4: 15:36:34 executing program 0: 15:36:34 executing program 2: 15:36:34 executing program 3: 15:36:35 executing program 5: 15:36:35 executing program 1: 15:36:35 executing program 4: 15:36:35 executing program 0: 15:36:35 executing program 3: 15:36:35 executing program 2: 15:36:35 executing program 1: 15:36:35 executing program 5: 15:36:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 15:36:36 executing program 0: 15:36:36 executing program 4: 15:36:36 executing program 2: 15:36:36 executing program 5: 15:36:36 executing program 1: 15:36:36 executing program 4: creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 15:36:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 15:36:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "31671ae9ddf3b2ffb0333700e1cffe52141d6cab"}}]}]}, 0x54}}, 0x0) 15:36:36 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000006300)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x90}, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000006280)='./file0/file0\x00', 0x90440, 0x0) 15:36:36 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:36:37 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 1029.358478][ T29] audit: type=1804 audit(1599406597.315:47): pid=20046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir021649807/syzkaller.GFOOCh/764/bus" dev="sda1" ino=16349 res=1 [ 1029.567487][ T29] audit: type=1804 audit(1599406597.395:48): pid=20053 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir021649807/syzkaller.GFOOCh/764/bus" dev="sda1" ino=16349 res=1 15:36:37 executing program 3: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x0) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000004000040000000000000000009500000000000000d387777ab82499fd7a38de0cd87509fd1d80585afff33091b533c720577af017450b2a776733ceb617f121d79e3628e72be0d39e77dcb168873294214f541bb89938c19978ea22254c58d75439a1edfee2adfeafe92d14ffab3ddc1dc21efe6f7c3913f273d7b48d10b9904fda943414bf2f1c68c4878937c8f83a5203d5b63a2689d486e66c4a5e059db4238ee52d47e704465a6a9726ba058bd85acc9322902ce974e50faf989fd44b66da1b795d04df0d9bfd563c608880516f25136a81d6b48d5ffd92b03fbfabd7013f8192a3029ad96441ba7db2c3e80f0dbf59164e8806259d3b7633f704b15c3dc9259fa3aa3106e4821a62a5c356d074eeb638904c8af7cd704f4afa93fc61d6ba0e2148b09a28cd376bc43a1445c635c73a6bd9cda98b27f9981f6af47d74e057515bef88b90f987de14f2a9e1b07dd8b865715f25a4f95cc0024e18e96570000f7dab1a31b2f0fb51e0d9348aa80e2e60cd60800000088b06a13d14f14e829e4330e4475096c886864c5bf8be6441e7e24a4162d88a668b65bc80a10d3357cd22db832a98c116b0000d92a6dabe73e52fd78db32e4f531abb858e1a4ee680c94407e1ee01d68139635ab636723848d90a40d2a2298b5cb3cbe8366b09957fc5ee5472fb7671f1b99a7b0508949eaf27f98356e321bb30e7bfd1c957c1fe85603ff909878b9db38af432516700efc72e2847e1e86967d2a12a357a69a6cd73b73cfff08965818b338e5f5d20031bad9c612f6ea2861dd34e5be9aa536bd5b16857f8a07c834e3bcd414872719ba6e7c6936dd077c98e273537b833df0f0d1f75fb153292c2c8d93d7bede97270f771917308d5cedb342b0ebac9c727e52d462ddea9e404f273b7f4f38cc671f30d17ed7058cca7ca3460a1b5877fe36b2a65627c10daa87ee6a9caa32aef136326076e22f7661c916d0215a6c6b6b140ed86a97ab7721f1eb00000000000000000ef52bdeb49a189c429363effa95251bb75537b668f2a0a3b46cfdb45dc1fb60cff5231b7cbac551e213425caaa03eb17c943a912122013f16ca05cc2a99f91c85c5694396d1b4a3c028336abf6dfb3fc9dbd0ef24b01da4e278114cb81a928731930bad795c1b39e0ab09c047bc9ce9f0fe32da6abad0e2bf7e5a30722392b7666b5831d67bb52e9f0da712f2af42a11ffd44f481a546ce0774fc7369dc7e7583de2f22d3e1ade747bab0c4af9b23ed6c0bb71944acc239f9616759ffb423670051caa7960b11ffbc04e9be5539d1437987d4340e2a81870331ea01c57609758b9b26acbfbc79fbf447b204e05844c00f2577581d03a19515e3120e1673ceaec0c59ca6f8a68d2f47cb08fd9c5885d06833b094f91a32bf621ce7a18ea02318318cc6b8d6ad77a8d2d3ff8779d34ac10c76ad6a099c050467ced134bafebcdd91664bf1a8fd667fd7d0686e5e3a50e8d6b39c73e3a9392814f525429e067ac024c00b66dc2873d8d0992354bf8096355c27bef22a91deeb17107895beff0f3728c42ee0581562fc7ed0a230645b1f5934adf6d6f9a4e01c6d659ba585a60790802ed79f47c1ccbf8524fa10398ef91e53a69b06b54a3e3e3ef13addeb6b95de0753bf5d05081157466f48d7758882e903cda3e93ece7c8e64719067ada30aec0f767d91c0678d9be28d0e6c20a25dca96d3af2942d34b93a69fcebcbb01df095836ec2f1fca52eb513b1308cfa0f747ce8c92"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:36:37 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 15:36:37 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 15:36:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x0) socket(0x10, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000000c0)={0x0, 0x0, [0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 15:36:37 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) [ 1029.931565][T20069] vivid-000: ================= START STATUS ================= [ 1029.939563][T20069] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 1029.946298][T20069] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 1029.953427][T20069] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 1029.960747][T20069] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 1029.967958][T20069] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 1029.973929][T20069] v4l2-ctrls: vivid-000: Show Border: false [ 1029.980106][T20069] v4l2-ctrls: vivid-000: Show Square: false [ 1029.986074][T20069] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 1029.993600][T20069] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 1030.000897][T20069] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 1030.008114][T20069] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 1030.015204][T20069] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 1030.021802][T20069] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 1030.028825][T20069] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 1030.035868][T20069] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 1030.042739][T20069] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 1030.049974][T20069] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 1030.055764][T20069] v4l2-ctrls: vivid-000: Transfer Function: Default [ 1030.062538][T20069] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 1030.069147][T20069] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 1030.075576][T20069] v4l2-ctrls: vivid-000: Quantization: Default [ 1030.081916][T20069] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 1030.089027][T20069] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 1030.095788][T20069] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1030.104826][T20069] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 1030.112027][T20069] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1030.120524][T20069] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 1030.126826][T20069] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 1030.134287][T20069] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 1030.141937][T20069] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 1030.148712][T20069] tpg source WxH: 640x360 (Y'CbCr) [ 1030.153866][T20069] tpg field: 1 [ 1030.157404][T20069] tpg crop: 640x360@0x0 [ 1030.161615][T20069] tpg compose: 640x360@0x0 [ 1030.166074][T20069] tpg colorspace: 8 [ 1030.170057][T20069] tpg transfer function: 0/0 [ 1030.174747][T20069] tpg Y'CbCr encoding: 0/0 [ 1030.179311][T20069] tpg quantization: 0/0 [ 1030.183501][T20069] tpg RGB range: 0/2 [ 1030.187555][T20069] vivid-000: ================== END STATUS ================== [ 1030.250436][ T29] audit: type=1804 audit(1599406598.205:49): pid=20072 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir021649807/syzkaller.GFOOCh/764/bus" dev="sda1" ino=16349 res=1 [ 1030.373431][T20074] ptrace attach of "/root/syz-executor.0"[8493] was attempted by ""[20074] [ 1030.413738][ T29] audit: type=1804 audit(1599406598.245:50): pid=20072 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir021649807/syzkaller.GFOOCh/764/bus" dev="sda1" ino=16349 res=1 [ 1030.450663][T20076] ptrace attach of "/root/syz-executor.0"[8493] was attempted by ""[20076] 15:36:38 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000027000)={0x1}) 15:36:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x300}, 0x1c) 15:36:38 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 15:36:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 15:36:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) 15:36:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) 15:36:39 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0xc0070020, 0x0) 15:36:39 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 1031.798701][T20104] new mount options do not match the existing superblock, will be ignored 15:36:39 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f00000002c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x59) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @local}, 0x10) 15:36:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x0, 0x0) timerfd_create(0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) epoll_create1(0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) 15:36:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 15:36:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) [ 1031.905535][T20105] new mount options do not match the existing superblock, will be ignored [ 1032.056274][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:36:40 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xc2, 0x0, 0x0) [ 1032.251847][T20119] device lo entered promiscuous mode [ 1032.268638][T20120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1032.281743][T20112] device lo left promiscuous mode [ 1032.326781][T20123] device lo entered promiscuous mode [ 1032.371402][T20112] device lo left promiscuous mode 15:36:40 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:36:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 15:36:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)=@usbdevfs_connect={0x1}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) 15:36:40 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 15:36:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) [ 1033.428792][T20142] usb usb6: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #1 15:36:41 executing program 0: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x500, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'macsec0\x00', 0xfffffffb}, 0x18) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00', {0x72080000}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readv(r5, 0x0, 0x0) ioctl$CHAR_RAW_PBSZGET(r5, 0x127b, &(0x7f0000000100)) 15:36:41 executing program 1: [ 1033.785934][T20148] bond0: (slave macvlan2): Error -98 calling set_mac_address 15:36:41 executing program 2: 15:36:42 executing program 4: 15:36:42 executing program 3: 15:36:42 executing program 1: [ 1035.053213][T20159] not chained 160000 origins [ 1035.057923][T20159] CPU: 0 PID: 20159 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1035.066583][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.076636][T20159] Call Trace: [ 1035.079934][T20159] dump_stack+0x21c/0x280 [ 1035.084273][T20159] kmsan_internal_chain_origin+0x6f/0x130 [ 1035.089998][T20159] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1035.096079][T20159] ? kzfree+0xda/0x120 [ 1035.100248][T20159] ? _copy_to_iter+0xedd/0x2de0 [ 1035.105107][T20159] ? kmsan_get_metadata+0x116/0x180 [ 1035.110335][T20159] ? kmsan_set_origin_checked+0x95/0xf0 [ 1035.115970][T20159] ? __local_bh_enable_ip+0x97/0x1d0 [ 1035.121271][T20159] ? kmsan_get_metadata+0x116/0x180 [ 1035.126477][T20159] ? kmsan_set_origin_checked+0x95/0xf0 [ 1035.132033][T20159] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1035.138114][T20159] ? _copy_from_user+0x201/0x310 [ 1035.143066][T20159] ? kmsan_get_metadata+0x116/0x180 [ 1035.148276][T20159] __msan_chain_origin+0x50/0x90 [ 1035.153230][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.158364][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.163317][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.167846][T20159] ? kmsan_get_metadata+0x116/0x180 [ 1035.173054][T20159] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1035.178955][T20159] ? kmsan_get_metadata+0x116/0x180 [ 1035.184154][T20159] ? kmsan_internal_set_origin+0x75/0xb0 [ 1035.189792][T20159] ? __msan_poison_alloca+0xf0/0x120 [ 1035.195087][T20159] ? __sys_recvmmsg+0xbb/0x610 [ 1035.199856][T20159] ? __sys_recvmmsg+0xbb/0x610 [ 1035.204629][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.209329][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.215414][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.221579][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.226796][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.231662][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.236183][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.242522][T20159] RIP: 0023:0xf7f12549 [ 1035.246586][T20159] Code: Bad RIP value. [ 1035.250651][T20159] RSP: 002b:00000000f54ca0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1035.259061][T20159] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001600 [ 1035.267139][T20159] RDX: 0000000000000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.275115][T20159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.283087][T20159] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1035.291054][T20159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.299032][T20159] Uninit was stored to memory at: [ 1035.304068][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.309794][T20159] __msan_chain_origin+0x50/0x90 [ 1035.314738][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.319849][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.324771][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.329258][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.334018][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.340102][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.346245][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.351432][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.356269][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.360763][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.367066][T20159] [ 1035.369378][T20159] Uninit was stored to memory at: [ 1035.374388][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.380101][T20159] __msan_chain_origin+0x50/0x90 [ 1035.385044][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.390171][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.395107][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.399608][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.404282][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.410360][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.416634][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.421831][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.426684][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.431204][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.437515][T20159] [ 1035.439842][T20159] Uninit was stored to memory at: [ 1035.444865][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.450578][T20159] __msan_chain_origin+0x50/0x90 [ 1035.455511][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.460619][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.465573][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.470070][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.474742][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.480803][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.486974][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.492165][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.497011][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.501511][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.507820][T20159] [ 1035.510135][T20159] Uninit was stored to memory at: [ 1035.515154][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.520867][T20159] __msan_chain_origin+0x50/0x90 [ 1035.525800][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.530904][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.535836][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.540334][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.545007][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.551069][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.557216][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.562408][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.567255][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.571752][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.578061][T20159] [ 1035.580378][T20159] Uninit was stored to memory at: [ 1035.585399][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.591110][T20159] __msan_chain_origin+0x50/0x90 [ 1035.596042][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.601145][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.606079][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.610577][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.615264][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.621327][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.627476][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.632668][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.637517][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.642016][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.648330][T20159] [ 1035.650651][T20159] Uninit was stored to memory at: [ 1035.655675][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.661390][T20159] __msan_chain_origin+0x50/0x90 [ 1035.666327][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.671435][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.676371][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.680871][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.685545][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.691611][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.697766][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.702964][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.707816][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.712316][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.718630][T20159] [ 1035.720949][T20159] Uninit was stored to memory at: [ 1035.725972][T20159] kmsan_internal_chain_origin+0xad/0x130 [ 1035.731691][T20159] __msan_chain_origin+0x50/0x90 [ 1035.736628][T20159] __get_compat_msghdr+0x6db/0x9d0 [ 1035.741737][T20159] get_compat_msghdr+0x108/0x2b0 [ 1035.746670][T20159] do_recvmmsg+0xdbb/0x22c0 [ 1035.751172][T20159] __sys_recvmmsg+0x5dd/0x610 [ 1035.755850][T20159] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1035.761917][T20159] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1035.768072][T20159] __do_fast_syscall_32+0x2af/0x480 [ 1035.773356][T20159] do_fast_syscall_32+0x6b/0xd0 [ 1035.778206][T20159] do_SYSENTER_32+0x73/0x90 [ 1035.782708][T20159] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.789028][T20159] [ 1035.791350][T20159] Local variable ----msg_sys@do_recvmmsg created at: [ 1035.798020][T20159] do_recvmmsg+0xbf/0x22c0 15:36:43 executing program 2: 15:36:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x36000000, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x130, 0x1a0, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x8000009, 0x401}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 1035.802433][T20159] do_recvmmsg+0xbf/0x22c0 15:36:43 executing program 2: 15:36:44 executing program 1: [ 1036.189757][T20162] bond0: (slave macvlan2): Error -98 calling set_mac_address 15:36:44 executing program 5: 15:36:44 executing program 2: 15:36:45 executing program 0: 15:36:45 executing program 3: 15:36:45 executing program 1: 15:36:45 executing program 5: 15:36:45 executing program 2: 15:36:45 executing program 2: 15:36:45 executing program 3: 15:36:45 executing program 5: 15:36:45 executing program 4: 15:36:45 executing program 1: 15:36:46 executing program 4: 15:36:46 executing program 3: 15:36:46 executing program 0: 15:36:46 executing program 2: 15:36:46 executing program 5: 15:36:46 executing program 1: 15:36:46 executing program 4: 15:36:47 executing program 3: 15:36:47 executing program 2: 15:36:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)={0x80041}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 15:36:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4(r0, &(0x7f0000000080)=@isdn, 0x0, 0x0) 15:36:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000004000a000a000100726f757465000000200002000800010000000000080003004000000004000600080002"], 0x50}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 15:36:47 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0xffffffff000, 0x5}) 15:36:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2, 0x7}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) 15:36:48 executing program 2: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) 15:36:48 executing program 1: socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:36:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x0, @dev}, 0x280, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 15:36:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 15:36:49 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400007e280000005e00ff03c81f8374b4c125a4ffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x4c}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0xa00e0000, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x300, 0x42, 0x0) 15:36:50 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) 15:36:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='limits\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 15:36:50 executing program 5: [ 1042.383775][ T1702] tipc: TX() has been purged, node left! [ 1047.155780][ T1702] device hsr_slave_0 left promiscuous mode [ 1047.197427][ T1702] device hsr_slave_1 left promiscuous mode [ 1047.217820][ T1702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.225530][ T1702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.237958][ T1702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.245764][ T1702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.280034][ T1702] device bridge_slave_1 left promiscuous mode [ 1047.286901][ T1702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.321451][ T1702] device bridge_slave_0 left promiscuous mode [ 1047.328528][ T1702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.397785][ T1702] device veth1_macvtap left promiscuous mode [ 1047.404204][ T1702] device veth0_macvtap left promiscuous mode [ 1047.410691][ T1702] device veth1_vlan left promiscuous mode [ 1047.416780][ T1702] device veth0_vlan left promiscuous mode 15:36:55 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x1408, 0x1}, 0x10}}, 0x0) [ 1051.239057][ T1702] device team_slave_1 left promiscuous mode [ 1051.246441][ T1702] team0 (unregistering): Port device team_slave_1 removed [ 1051.264722][ T1702] device team_slave_0 left promiscuous mode [ 1051.274101][ T1702] team0 (unregistering): Port device team_slave_0 removed [ 1051.292123][ T1702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.301125][ T1702] device bond_slave_1 left promiscuous mode [ 1051.317754][ T1702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.331623][ T1702] device bond_slave_0 left promiscuous mode [ 1051.409224][ T1702] bond0 (unregistering): Released all slaves [ 1051.511603][T20323] IPVS: ftp: loaded support on port[0] = 21 [ 1052.076296][T20323] chnl_net:caif_netlink_parms(): no params data found [ 1052.257745][T20323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.265228][T20323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.273638][T20323] device bridge_slave_0 entered promiscuous mode [ 1052.294207][T20323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.301567][T20323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.311645][T20323] device bridge_slave_1 entered promiscuous mode [ 1052.357963][T20323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.385305][T20323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.435660][T20323] team0: Port device team_slave_0 added [ 1052.452393][T20323] team0: Port device team_slave_1 added [ 1052.525610][T20323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.532675][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.558882][T20323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.570112][ T8716] Bluetooth: hci0: command 0x0409 tx timeout [ 1052.589371][T20323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.596519][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.623057][T20323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.688425][T20323] device hsr_slave_0 entered promiscuous mode [ 1052.701577][T20323] device hsr_slave_1 entered promiscuous mode [ 1052.990136][T20323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.017253][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1053.025917][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1053.043579][T20323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.058986][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1053.068307][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1053.077607][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.085017][ T3220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.097386][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1053.114036][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1053.123812][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1053.133233][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.140623][ T8716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.191427][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1053.202828][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1053.214031][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1053.225033][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1053.234683][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1053.243992][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1053.254282][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1053.266130][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1053.286026][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1053.303749][T20323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1053.344317][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1053.352253][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1053.376270][T20323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.495220][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1053.536357][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1053.546638][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1053.555757][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1053.577249][T20323] device veth0_vlan entered promiscuous mode [ 1053.602490][T20323] device veth1_vlan entered promiscuous mode [ 1053.653931][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1053.663424][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.682577][T20323] device veth0_macvtap entered promiscuous mode [ 1053.702292][T20323] device veth1_macvtap entered promiscuous mode [ 1053.741015][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1053.752381][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.762432][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1053.773539][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.783672][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1053.794561][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.804749][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1053.815398][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.825456][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1053.836048][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.848769][T20323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.857383][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1053.866901][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1053.876357][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1053.886325][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1053.910015][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1053.920703][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.930834][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1053.941591][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.951669][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1053.962306][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.972390][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1053.985129][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.995189][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1054.005869][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.018910][T20323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.033705][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1054.043930][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1054.348161][T20539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1054.398888][T20540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:37:02 executing program 2: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001400)=[{0x0, 0x0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 15:37:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x132, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:37:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 15:37:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x11a, &(0x7f0000000300)=[{&(0x7f0000000340)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:37:02 executing program 5: 15:37:02 executing program 0: [ 1054.606330][ T3220] Bluetooth: hci0: command 0x041b tx timeout 15:37:02 executing program 5: 15:37:02 executing program 2: 15:37:03 executing program 1: 15:37:03 executing program 3: 15:37:03 executing program 0: 15:37:03 executing program 5: 15:37:03 executing program 1: 15:37:03 executing program 2: 15:37:03 executing program 0: [ 1056.688543][ T8717] Bluetooth: hci0: command 0x040f tx timeout 15:37:05 executing program 4: 15:37:05 executing program 3: 15:37:05 executing program 5: 15:37:05 executing program 1: 15:37:05 executing program 2: 15:37:05 executing program 0: 15:37:05 executing program 0: 15:37:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000700), &(0x7f0000000740)=0x4) 15:37:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000180)=0x8) 15:37:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 15:37:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0xfedd, 0x2}, 0x10) 15:37:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 15:37:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x5a) 15:37:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080)={0x40}, 0x1) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 15:37:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="ff", 0x1, 0x0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 15:37:06 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000900)="85", 0x1}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x1) dup2(r1, r0) 15:37:06 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@un=@abs={0x8}, 0x8, 0x0}, 0x0) 15:37:06 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x184) [ 1058.764327][ T3220] Bluetooth: hci0: command 0x0419 tx timeout 15:37:07 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 15:37:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000000)=0x8) 15:37:07 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r1) r3 = fcntl$dupfd(r2, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 15:37:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000080), 0x1) 15:37:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), 0x8) 15:37:07 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) 15:37:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000200)=[{0xffffffffffffff9c}, {}, {}, {}, {}, {}, {r2}], 0x7, 0x8000000000049) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0054f) shutdown(r2, 0x0) 15:37:07 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000002c0)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0x1c, 0x1c, 0x2}, 0x1c) 15:37:07 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r2, 0x5, 0xfffffff9, 0x3}, 0x10) 15:37:08 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x1a, &(0x7f00000000c0)={r5}, 0x8) 15:37:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 15:37:08 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000240)=@un=@file={0xa}, 0xa) 15:37:08 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)=ANY=[], 0x9a) 15:37:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000000)=ANY=[@ANYRES16], 0x98) 15:37:08 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) 15:37:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20104) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}], 0x10}, 0x0) 15:37:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x105) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, &(0x7f0000001480)=[{0x10}], 0x10}, 0x0) 15:37:09 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x105) shutdown(r0, 0x1) 15:37:09 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 15:37:09 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) close(r0) 15:37:09 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f00000034c0)=[{&(0x7f0000000080)="8fdd8319c93eb61c61de39280be0ff04411c4e48d1cc32f311c2705f40e918e3443f87afa5157ff345ca2d81cdffe1eb63b63457624e659a03efa47fe1b0c37d787b", 0x42}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0xfaf}], 0x3}, 0x0) 15:37:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000080), 0x4) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 15:37:10 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000900)="85", 0xfc89}], 0x1}, 0x0) 15:37:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r2, 0x5, 0x0, 0x3}, 0x10) 15:37:10 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="ffb3ebf9", @ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000019280)=ANY=[@ANYBLOB="001c4e230000000000000000000000040000ffff7f00000100"/128, @ANYRES32=r3], 0x9a) 15:37:10 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x42, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 15:37:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) 15:37:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 15:37:11 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 15:37:11 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000100)="a1", 0x1}], 0x1}, 0x0) 15:37:11 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xc}, 0x0) 15:37:11 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) getsockname$inet6(r2, 0x0, &(0x7f00000000c0)) 15:37:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000780), 0x4) 15:37:11 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000040)='A', 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20104) shutdown(r0, 0x1) 15:37:12 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8002, &(0x7f0000000040)=ANY=[@ANYBLOB="1c1c", @ANYRESOCT], 0x98) 15:37:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x1203, &(0x7f0000000000)={0x0, 0x4000}, &(0x7f0000000080)=0x10) 15:37:12 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0xb) r3 = fcntl$dupfd(r2, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x24, &(0x7f0000000000), 0xfe6a) 15:37:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 15:37:12 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x23) 15:37:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000000)=0x8) 15:37:12 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) 15:37:12 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x2) 15:37:12 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x42, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 15:37:13 executing program 1: 15:37:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/91, 0x5b}, {0x0}, {0x0}, {0x0}], 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e005a1) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r3, 0x0) 15:37:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x28, 0x2}, 0x10) 15:37:13 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="001c4e230000000000000020"], 0x9a) 15:37:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 15:37:13 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x2001, &(0x7f0000000100)=ANY=[], 0xa) 15:37:14 executing program 4: 15:37:14 executing program 5: 15:37:14 executing program 1: 15:37:14 executing program 0: 15:37:14 executing program 2: 15:37:14 executing program 3: 15:37:14 executing program 5: 15:37:14 executing program 4: 15:37:14 executing program 1: 15:37:14 executing program 2: 15:37:14 executing program 0: 15:37:15 executing program 3: 15:37:15 executing program 5: 15:37:15 executing program 4: 15:37:15 executing program 1: 15:37:15 executing program 0: 15:37:15 executing program 2: 15:37:15 executing program 4: 15:37:15 executing program 5: 15:37:15 executing program 3: 15:37:15 executing program 1: 15:37:15 executing program 2: 15:37:15 executing program 0: 15:37:16 executing program 4: 15:37:16 executing program 5: 15:37:16 executing program 3: 15:37:16 executing program 1: 15:37:16 executing program 2: 15:37:16 executing program 0: 15:37:16 executing program 4: 15:37:16 executing program 5: 15:37:16 executing program 3: 15:37:16 executing program 1: 15:37:16 executing program 2: 15:37:17 executing program 4: 15:37:17 executing program 0: 15:37:17 executing program 3: 15:37:17 executing program 5: 15:37:17 executing program 1: 15:37:17 executing program 2: 15:37:17 executing program 4: 15:37:17 executing program 0: 15:37:17 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "0de8678c41fb2a37", "bae2445a070be0ef3b9fba9533b8f1bb", "6dcfd8b0", "7b2dc25999bc85e8"}, 0x28) sendfile(r5, r3, 0x0, 0x800100020001) creat(&(0x7f0000000100)='./bus\x00', 0x0) 15:37:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x2, &(0x7f0000000040)=0x0) io_destroy(r2) 15:37:18 executing program 1: get_mempolicy(0x0, &(0x7f0000000340), 0x0, &(0x7f0000ff2000/0x2000)=nil, 0x0) 15:37:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="00bf7e325c489a0000941ac840"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x10000000000], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 15:37:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x6a, &(0x7f0000000240)="f7f249b9740c0764ca04f400befbf2f3c921bf3c0f339e57f4f21016a5b60a00088024c30e478947d190ac0000009038396bb68e4053cd0c42727a81b1af4915e96c43607a144f6543b6faf143e648fcbde4967033f51be252a22ea40c9422247185569bdffc58cff168"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1070.247795][ T29] audit: type=1804 audit(1599406638.210:51): pid=20959 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir482440033/syzkaller.EVqUCc/773/bus" dev="sda1" ino=16323 res=1 [ 1070.300712][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:37:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) [ 1070.527455][ T29] audit: type=1804 audit(1599406638.340:52): pid=20959 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir482440033/syzkaller.EVqUCc/773/bus" dev="sda1" ino=16323 res=1 [ 1070.552405][ T29] audit: type=1804 audit(1599406638.440:53): pid=20963 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir482440033/syzkaller.EVqUCc/773/bus" dev="sda1" ino=16323 res=1 15:37:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x280, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 15:37:18 executing program 3: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) 15:37:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/219) 15:37:18 executing program 4: getpgid(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x3f00}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/53, 0x33ff0}], 0x1}}], 0x8000000000002fe, 0x0, 0x0) 15:37:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)={0x114, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @fd}, @generic="9e2491f99c76c6d17929ad067f2e8bfa0a6d823304edbffb37f85e038d915e9615a982e2df6c42df46fe2413dbc08d6c917e7281fe611a8ea94a9cab4f7892aacc0b3567d6efe02896007481fb3900f0c8e385c183ad160ee4b1e32a09c6157deac906c798101602fb4e9c0368162a0e2922755f2f51e3acb94887b6fd4859d3fab8432c0b4243d3c9a8e3180b8529b2fef161386eddc8de73ecebc17c7636958a5ac0ef49b90d5ebfc51430ae014e24f7718a4b74845d8b4ce81a964da3", @typed={0x8, 0x84, 0x0, 0x0, @u32}, @generic="2269d7f5e66d1b859ae2cb5e38c269bb40adb1fd8ae074574fba8fde9c22ae7c42a140a89e0de2a50736ee046e352d"]}]}, 0x114}], 0x1}, 0x0) 15:37:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/135, 0x87}], 0x1, 0x2, 0x0) 15:37:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffffffffffc3001f"], 0x24}}, 0x0) 15:37:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x3, 0x0, [{0x0, 0x36, &(0x7f00000001c0)=""/54}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 15:37:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002080)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x300, 0x0) 15:37:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f000047b000), 0x1c) 15:37:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000afc0000000000000000000008000140", @ANYBLOB="140005000000000000000000000ea8ffe0000002"], 0x38}}, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000400)=0x20, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x1, 0x0, 0x0, 0x100000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', 0x0) 15:37:20 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12040, 0x0, 0x0) 15:37:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) 15:37:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'tunl0\x00'}) 15:37:20 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r0) socket(0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x6042300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) [ 1072.356191][T21024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:37:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "e75ed6314af71f62", "8be3c1ec34057e9433ae66ec17e550c5", "b3caeb4e", "c360498afc480304"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 15:37:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060108300002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 15:37:20 executing program 5: mkdirat(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x200000000000011, 0x3, 0x0) getsockopt$packet_buf(r0, 0x107, 0x12, &(0x7f0000651000)=""/234, &(0x7f0000000100)=0xea) 15:37:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x80000000001f) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) 15:37:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0xb605}}], 0xc6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:37:21 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x28000000) clone(0x1440200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1073.156632][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1073.952791][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:37:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write(r0, 0x0, 0x0) 15:37:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x147, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 15:37:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r0, &(0x7f0000000480)=""/255, 0xff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = getpgrp(0xffffffffffffffff) tkill(r1, 0x1004000000016) 15:37:22 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syncfs(r0) 15:37:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') 15:37:22 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) 15:37:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000026000511d25a80648c63940d0124fc60100035400a74db43", 0x1c}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) 15:37:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15:37:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772ec3b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27", 0x2a}], 0x2) 15:37:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = dup2(r0, r0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 15:37:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000180)=0x10) 15:37:23 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x101]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 15:37:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 15:37:24 executing program 1: syz_open_procfs(0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 15:37:24 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f0000000280)=""/196, 0xfffffdc0) 15:37:24 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) 15:37:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000000", @ANYRES32, @ANYRES32], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) [ 1076.629816][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1076.648552][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1076.661422][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1076.676654][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1076.691988][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1076.705008][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1076.719016][T21125] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 15:37:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x80fe) 15:37:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 1077.167991][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1077.186200][T21136] device veth2 entered promiscuous mode 15:37:25 executing program 3: r0 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:37:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1653e, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 15:37:25 executing program 4: 15:37:25 executing program 1: 15:37:26 executing program 5: 15:37:26 executing program 3: 15:37:26 executing program 1: 15:37:26 executing program 0: 15:37:26 executing program 4: 15:37:26 executing program 2: 15:37:26 executing program 5: 15:37:26 executing program 3: 15:37:27 executing program 4: 15:37:27 executing program 0: 15:37:27 executing program 1: 15:37:27 executing program 2: 15:37:27 executing program 3: 15:37:27 executing program 5: 15:37:27 executing program 0: 15:37:27 executing program 1: 15:37:27 executing program 4: 15:37:27 executing program 2: 15:37:28 executing program 3: 15:37:28 executing program 5: 15:37:28 executing program 0: 15:37:28 executing program 1: 15:37:28 executing program 4: 15:37:28 executing program 2: 15:37:28 executing program 3: 15:37:28 executing program 5: 15:37:28 executing program 0: 15:37:28 executing program 2: 15:37:28 executing program 1: 15:37:29 executing program 4: 15:37:29 executing program 3: 15:37:29 executing program 5: 15:37:29 executing program 2: 15:37:29 executing program 0: 15:37:29 executing program 4: 15:37:29 executing program 1: 15:37:29 executing program 3: 15:37:29 executing program 5: 15:37:30 executing program 1: 15:37:30 executing program 2: 15:37:30 executing program 4: 15:37:30 executing program 3: 15:37:30 executing program 0: 15:37:30 executing program 5: 15:37:30 executing program 2: 15:37:30 executing program 1: 15:37:31 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket(0x0, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x3, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) socket(0x4, 0x0, 0xfff) 15:37:31 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) 15:37:31 executing program 0: pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xf) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 15:37:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='a'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 15:37:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 15:37:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 15:37:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x10}}]}, 0x38}}, 0x0) [ 1084.628229][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1084.666409][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:37:32 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x10020c5, 0x0, 0x0, 0x0, 0x0, 0xb605}}], 0xc6, 0x0) 15:37:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 15:37:32 executing program 3: r0 = syz_init_net_socket$x25(0x3, 0x2, 0x8) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e9, &(0x7f0000000200)={'team_slave_1\x00'}) 15:37:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8021100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:37:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0x2, 0x4a23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000700)={0x2, 0x4e21, @dev}, 0x10, 0x0}}], 0x2, 0x0) 15:37:33 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x150, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x180, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x119, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x150}}, 0x0) 15:37:33 executing program 0: r0 = syz_io_uring_setup(0x76ce, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f0000000040)='!]\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 15:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) [ 1086.220702][T21278] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. 15:37:34 executing program 4: io_setup(0x1, &(0x7f00000003c0)=0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) unshare(0x0) [ 1086.309177][T21279] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. 15:37:34 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet6_buf(r0, 0x88, 0x64, 0x0, &(0x7f0000000100)) 15:37:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15:37:34 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 15:37:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 15:37:35 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@tipc, 0x80, 0x0}}], 0x2, 0x0) 15:37:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0xffffff7f, 0x0) 15:37:35 executing program 2: r0 = syz_init_net_socket$x25(0x3, 0x2, 0x8) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:37:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sync_file_range(r0, 0x0, 0x0, 0x7) 15:37:35 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020f00001000000000a4ea00000000000800120000000100007ab000000032f706000457000000000000002108630200b62456d5000000005b2507f9000000000000ada8008004000100008000000000030006000000000002000080ac14ffbbf000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x553, 0x0) 15:37:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1) 15:37:36 executing program 1: add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x2, 0x0) 15:37:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x3, 0x200000, &(0x7f0000000080)}, &(0x7f0000000080)="00001708856f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x600}) 15:37:36 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x401070ca, 0x0) 15:37:36 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x53) r3 = dup3(r1, r0, 0x0) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x2000a048}}, 0x0) 15:37:37 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x400003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) 15:37:37 executing program 0: r0 = io_uring_setup(0x1, &(0x7f0000000000)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000180)=r1, 0x1) 15:37:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 15:37:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) 15:37:38 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x44180) 15:37:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001fa000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x142c1d58, 0x20000000fb], 0x10000, 0x501}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:37:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x76, &(0x7f00000016c0)={r2}, &(0x7f0000001700)=0x8) 15:37:38 executing program 4: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 15:37:38 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffff8, 0x69797, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x24, 0x0, 0x0, 0xb92}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1090.788785][T21362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 15:37:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) 15:37:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) 15:37:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000005b00)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001680)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 15:37:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pipe2(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) dup2(r1, r0) 15:37:39 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x3085, 0x2d, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1002, 0x0, 0x30051, r2, 0x0) syz_open_procfs$namespace(0x0, 0x0) 15:37:39 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) [ 1092.049054][T21374] not chained 170000 origins [ 1092.053801][T21374] CPU: 1 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1092.062470][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.072592][T21374] Call Trace: [ 1092.075873][T21374] dump_stack+0x21c/0x280 [ 1092.080196][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1092.085906][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.091097][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1092.096630][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1092.102692][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.107876][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1092.113685][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1092.119734][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.124919][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1092.130452][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1092.136515][T21374] ? _copy_from_user+0x201/0x310 [ 1092.141441][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.146625][T21374] __msan_chain_origin+0x50/0x90 [ 1092.151553][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.156670][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.161604][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.166101][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1092.171908][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.177097][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1092.182978][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1092.188162][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1092.193785][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1092.199075][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1092.203823][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1092.208590][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.213264][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.219321][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.225464][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.230657][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.235498][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.239992][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.246462][T21374] RIP: 0023:0xf7f34549 [ 1092.250517][T21374] Code: Bad RIP value. [ 1092.254571][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1092.262975][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1092.271020][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1092.279097][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.287053][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1092.295020][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.302985][T21374] Uninit was stored to memory at: [ 1092.308015][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.313718][T21374] __msan_chain_origin+0x50/0x90 [ 1092.318641][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.323739][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.328661][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.333154][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.337818][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.343873][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.350015][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.355266][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.360110][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.364602][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.371083][T21374] [ 1092.373485][T21374] Uninit was stored to memory at: [ 1092.378501][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.384222][T21374] __msan_chain_origin+0x50/0x90 [ 1092.389168][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.394285][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.399220][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.403724][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.408400][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.414562][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.420710][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.425895][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.430733][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.435228][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.441549][T21374] [ 1092.443863][T21374] Uninit was stored to memory at: [ 1092.448873][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.454573][T21374] __msan_chain_origin+0x50/0x90 [ 1092.459496][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.464596][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.469519][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.474010][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.478673][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.484727][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.490951][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.496131][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.500963][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.505460][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.511863][T21374] [ 1092.514268][T21374] Uninit was stored to memory at: [ 1092.519273][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.524975][T21374] __msan_chain_origin+0x50/0x90 [ 1092.529895][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.534994][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.539913][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.544398][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.549079][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.555132][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.561272][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.566456][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.571301][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.575791][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.582092][T21374] [ 1092.584401][T21374] Uninit was stored to memory at: [ 1092.589429][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.595135][T21374] __msan_chain_origin+0x50/0x90 [ 1092.600059][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.605155][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.610077][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.614564][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.619230][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.625282][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.631419][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.636602][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.641448][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.645958][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.652259][T21374] [ 1092.654567][T21374] Uninit was stored to memory at: [ 1092.659578][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.665284][T21374] __msan_chain_origin+0x50/0x90 [ 1092.670208][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.675303][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.680225][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.684716][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.689379][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.695433][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.701579][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.706766][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.711602][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.716090][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.722389][T21374] [ 1092.724697][T21374] Uninit was stored to memory at: [ 1092.729708][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1092.735513][T21374] __msan_chain_origin+0x50/0x90 [ 1092.740445][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1092.745540][T21374] get_compat_msghdr+0x108/0x2b0 [ 1092.750462][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1092.754955][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1092.759623][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1092.765676][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1092.771815][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1092.776996][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1092.781832][T21374] do_SYSENTER_32+0x73/0x90 [ 1092.786323][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1092.792624][T21374] [ 1092.794933][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1092.801590][T21374] do_recvmmsg+0xbf/0x22c0 [ 1092.805989][T21374] do_recvmmsg+0xbf/0x22c0 [ 1093.556078][T21374] not chained 180000 origins [ 1093.560726][T21374] CPU: 0 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1093.569376][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.579411][T21374] Call Trace: [ 1093.582696][T21374] dump_stack+0x21c/0x280 [ 1093.587018][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1093.592728][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.597912][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1093.603458][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1093.609523][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.614712][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1093.620506][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1093.626557][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.631740][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1093.637271][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1093.643332][T21374] ? _copy_from_user+0x201/0x310 [ 1093.648256][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.653438][T21374] __msan_chain_origin+0x50/0x90 [ 1093.658363][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1093.663476][T21374] get_compat_msghdr+0x108/0x2b0 [ 1093.668407][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1093.672903][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1093.678703][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.683893][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1093.689773][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1093.694957][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1093.700580][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1093.705850][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1093.710619][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1093.715377][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1093.720059][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1093.726126][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1093.732271][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1093.737478][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1093.742320][T21374] do_SYSENTER_32+0x73/0x90 [ 1093.746826][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.753136][T21374] RIP: 0023:0xf7f34549 [ 1093.757181][T21374] Code: Bad RIP value. [ 1093.761232][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1093.769631][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1093.777589][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1093.785547][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1093.793502][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1093.801476][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1093.809442][T21374] Uninit was stored to memory at: [ 1093.814473][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1093.820177][T21374] __msan_chain_origin+0x50/0x90 [ 1093.825101][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1093.830197][T21374] get_compat_msghdr+0x108/0x2b0 [ 1093.835117][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1093.839606][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1093.844286][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1093.850342][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1093.856482][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1093.861666][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1093.866504][T21374] do_SYSENTER_32+0x73/0x90 [ 1093.870989][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.877287][T21374] [ 1093.879594][T21374] Uninit was stored to memory at: [ 1093.884610][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1093.890311][T21374] __msan_chain_origin+0x50/0x90 [ 1093.895232][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1093.900343][T21374] get_compat_msghdr+0x108/0x2b0 [ 1093.905262][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1093.909748][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1093.914413][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1093.920461][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1093.926614][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1093.931798][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1093.936631][T21374] do_SYSENTER_32+0x73/0x90 [ 1093.941118][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1093.947417][T21374] [ 1093.949723][T21374] Uninit was stored to memory at: [ 1093.954732][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1093.960436][T21374] __msan_chain_origin+0x50/0x90 [ 1093.965360][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1093.970453][T21374] get_compat_msghdr+0x108/0x2b0 [ 1093.975374][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1093.979863][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1093.984527][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1093.990578][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1093.996717][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1094.001902][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1094.006737][T21374] do_SYSENTER_32+0x73/0x90 [ 1094.011234][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.017533][T21374] [ 1094.019841][T21374] Uninit was stored to memory at: [ 1094.024860][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1094.030563][T21374] __msan_chain_origin+0x50/0x90 [ 1094.035498][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1094.040595][T21374] get_compat_msghdr+0x108/0x2b0 [ 1094.045515][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1094.049999][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1094.054663][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1094.060725][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1094.066866][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1094.072045][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1094.076880][T21374] do_SYSENTER_32+0x73/0x90 [ 1094.081468][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.087770][T21374] [ 1094.090074][T21374] Uninit was stored to memory at: [ 1094.095086][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1094.100785][T21374] __msan_chain_origin+0x50/0x90 [ 1094.105701][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1094.110792][T21374] get_compat_msghdr+0x108/0x2b0 [ 1094.115716][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1094.120203][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1094.124875][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1094.130948][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1094.137086][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1094.142270][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1094.147116][T21374] do_SYSENTER_32+0x73/0x90 [ 1094.151605][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.157902][T21374] [ 1094.160208][T21374] Uninit was stored to memory at: [ 1094.165217][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1094.170917][T21374] __msan_chain_origin+0x50/0x90 [ 1094.175837][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1094.180959][T21374] get_compat_msghdr+0x108/0x2b0 [ 1094.185884][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1094.190387][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1094.195049][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1094.201102][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1094.207586][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1094.212765][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1094.217597][T21374] do_SYSENTER_32+0x73/0x90 [ 1094.222086][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.228403][T21374] [ 1094.230711][T21374] Uninit was stored to memory at: [ 1094.235715][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1094.241415][T21374] __msan_chain_origin+0x50/0x90 [ 1094.246336][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1094.251428][T21374] get_compat_msghdr+0x108/0x2b0 [ 1094.256345][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1094.260830][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1094.265495][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1094.271548][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1094.277698][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1094.282882][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1094.287732][T21374] do_SYSENTER_32+0x73/0x90 [ 1094.292218][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1094.298516][T21374] [ 1094.300824][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1094.307484][T21374] do_recvmmsg+0xbf/0x22c0 [ 1094.311898][T21374] do_recvmmsg+0xbf/0x22c0 [ 1094.914869][T21374] not chained 190000 origins [ 1094.919501][T21374] CPU: 1 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1094.928158][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.938197][T21374] Call Trace: [ 1094.941485][T21374] dump_stack+0x21c/0x280 [ 1094.945816][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1094.951526][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1094.956710][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1094.962247][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1094.968314][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1094.973501][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1094.979296][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1094.985356][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1094.990558][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1094.996095][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1095.002153][T21374] ? _copy_from_user+0x201/0x310 [ 1095.007099][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1095.012288][T21374] __msan_chain_origin+0x50/0x90 [ 1095.017304][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.022541][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.027478][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.031990][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1095.037807][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1095.043007][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1095.048887][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1095.054071][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1095.059688][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1095.064964][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1095.069712][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1095.074553][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.079230][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.085294][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.091436][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.096624][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.101465][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.105960][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.112278][T21374] RIP: 0023:0xf7f34549 [ 1095.116322][T21374] Code: Bad RIP value. [ 1095.120457][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1095.128852][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1095.136805][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1095.144759][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.152722][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1095.160683][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.168648][T21374] Uninit was stored to memory at: [ 1095.173663][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.179366][T21374] __msan_chain_origin+0x50/0x90 [ 1095.184287][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.189383][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.194313][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.198800][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.203458][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.209527][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.215685][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.220869][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.225724][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.230230][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.236535][T21374] [ 1095.238841][T21374] Uninit was stored to memory at: [ 1095.243862][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.249566][T21374] __msan_chain_origin+0x50/0x90 [ 1095.254518][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.259616][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.264535][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.269027][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.273690][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.279757][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.285900][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.291086][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.295925][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.300417][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.306718][T21374] [ 1095.309028][T21374] Uninit was stored to memory at: [ 1095.314041][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.319759][T21374] __msan_chain_origin+0x50/0x90 [ 1095.324684][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.329780][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.334705][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.339189][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.343871][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.349929][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.356072][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.361297][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.366133][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.370624][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.376923][T21374] [ 1095.379238][T21374] Uninit was stored to memory at: [ 1095.384248][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.389950][T21374] __msan_chain_origin+0x50/0x90 [ 1095.394887][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.399994][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.404932][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.409444][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.414112][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.420174][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.426318][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.431515][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.436351][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.440840][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.447143][T21374] [ 1095.449451][T21374] Uninit was stored to memory at: [ 1095.454480][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.460179][T21374] __msan_chain_origin+0x50/0x90 [ 1095.465133][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.470227][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.475147][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.479633][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.484294][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.490346][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.496502][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.501685][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.506519][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.511005][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.517302][T21374] [ 1095.519606][T21374] Uninit was stored to memory at: [ 1095.524612][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.530315][T21374] __msan_chain_origin+0x50/0x90 [ 1095.535252][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.540347][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.545269][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.549757][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.554424][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.560478][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.566619][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.571800][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.576640][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.581135][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.587435][T21374] [ 1095.589743][T21374] Uninit was stored to memory at: [ 1095.594752][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1095.600458][T21374] __msan_chain_origin+0x50/0x90 [ 1095.605380][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1095.610476][T21374] get_compat_msghdr+0x108/0x2b0 [ 1095.615400][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1095.619891][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1095.624573][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1095.630647][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1095.636785][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1095.641974][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1095.646817][T21374] do_SYSENTER_32+0x73/0x90 [ 1095.651310][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1095.657609][T21374] [ 1095.659921][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1095.666579][T21374] do_recvmmsg+0xbf/0x22c0 [ 1095.670978][T21374] do_recvmmsg+0xbf/0x22c0 [ 1095.891569][T21401] not chained 200000 origins [ 1095.896305][T21401] CPU: 0 PID: 21401 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1095.904970][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.915022][T21401] Call Trace: [ 1095.918324][T21401] dump_stack+0x21c/0x280 [ 1095.922671][T21401] kmsan_internal_chain_origin+0x6f/0x130 [ 1095.928396][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1095.933597][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1095.939144][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1095.945212][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1095.950417][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1095.956229][T21401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1095.962304][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1095.967510][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1095.973062][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1095.979133][T21401] ? _copy_from_user+0x201/0x310 [ 1095.984100][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1095.989304][T21401] __msan_chain_origin+0x50/0x90 [ 1095.994248][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1095.999383][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.004329][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.008840][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1096.014659][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1096.019865][T21401] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1096.025760][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1096.030957][T21401] ? kmsan_internal_set_origin+0x75/0xb0 [ 1096.036595][T21401] ? __msan_poison_alloca+0xf0/0x120 [ 1096.041979][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1096.046741][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1096.051509][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.056206][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.062295][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.068452][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.073657][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.078511][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.083034][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.089354][T21401] RIP: 0023:0xf7f34549 [ 1096.093409][T21401] Code: Bad RIP value. [ 1096.097465][T21401] RSP: 002b:00000000f54cb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1096.105872][T21401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1096.113934][T21401] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1096.121899][T21401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1096.129864][T21401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1096.137828][T21401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.145801][T21401] Uninit was stored to memory at: [ 1096.150829][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.156546][T21401] __msan_chain_origin+0x50/0x90 [ 1096.161483][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.166592][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.171523][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.176039][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.180719][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.186781][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.192964][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.198158][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.203007][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.207512][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.213822][T21401] [ 1096.216144][T21401] Uninit was stored to memory at: [ 1096.221188][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.226930][T21401] __msan_chain_origin+0x50/0x90 [ 1096.231869][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.237065][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.242002][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.246504][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.251203][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.257277][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.263442][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.268643][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.273513][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.278022][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.284445][T21401] [ 1096.286771][T21401] Uninit was stored to memory at: [ 1096.291803][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.297520][T21401] __msan_chain_origin+0x50/0x90 [ 1096.302458][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.307568][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.312519][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.317019][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.321695][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.327764][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.333914][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.339107][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.344043][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.348547][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.354945][T21401] [ 1096.357267][T21401] Uninit was stored to memory at: [ 1096.362296][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.368013][T21401] __msan_chain_origin+0x50/0x90 [ 1096.372953][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.378084][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.383029][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.387534][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.392227][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.398291][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.404451][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.409658][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.414516][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.419022][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.425334][T21401] [ 1096.427657][T21401] Uninit was stored to memory at: [ 1096.432692][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.438492][T21401] __msan_chain_origin+0x50/0x90 [ 1096.443430][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.448544][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.453479][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.457983][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.462665][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.468820][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.474978][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.480177][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.485025][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.489528][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.495837][T21401] [ 1096.498151][T21401] Uninit was stored to memory at: [ 1096.503178][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.508895][T21401] __msan_chain_origin+0x50/0x90 [ 1096.513836][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.518946][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.523878][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.528379][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.533055][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.539133][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.545304][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.550504][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.555356][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.559867][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.566178][T21401] [ 1096.568498][T21401] Uninit was stored to memory at: [ 1096.573524][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1096.579244][T21401] __msan_chain_origin+0x50/0x90 [ 1096.584186][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1096.589296][T21401] get_compat_msghdr+0x108/0x2b0 [ 1096.594238][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1096.598742][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1096.603417][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1096.609481][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1096.615631][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1096.620827][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1096.625678][T21401] do_SYSENTER_32+0x73/0x90 [ 1096.630192][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1096.636509][T21401] [ 1096.638827][T21401] Local variable ----msg_sys@do_recvmmsg created at: [ 1096.645494][T21401] do_recvmmsg+0xbf/0x22c0 [ 1096.649907][T21401] do_recvmmsg+0xbf/0x22c0 [ 1096.984040][T21374] not chained 210000 origins [ 1096.988753][T21374] CPU: 0 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1096.997415][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.007650][T21374] Call Trace: [ 1097.010957][T21374] dump_stack+0x21c/0x280 [ 1097.015294][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1097.021017][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.026223][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1097.031773][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1097.037841][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.043044][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1097.048857][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1097.054929][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.060134][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1097.065688][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1097.071760][T21374] ? _copy_from_user+0x201/0x310 [ 1097.076704][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.081903][T21374] __msan_chain_origin+0x50/0x90 [ 1097.086847][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.091976][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.096921][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.101433][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1097.107252][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.112455][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1097.118364][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1097.123567][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1097.129204][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1097.134498][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1097.139262][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1097.144051][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.148746][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.154824][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.160988][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.166198][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.171056][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.175567][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.181896][T21374] RIP: 0023:0xf7f34549 [ 1097.186030][T21374] Code: Bad RIP value. [ 1097.190096][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1097.198507][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1097.206562][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1097.214534][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1097.222505][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1097.230472][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1097.238546][T21374] Uninit was stored to memory at: [ 1097.243578][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.249307][T21374] __msan_chain_origin+0x50/0x90 [ 1097.254254][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.259457][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.264403][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.268921][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.273598][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.279663][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.285815][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.291020][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.295870][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.300376][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.306692][T21374] [ 1097.309010][T21374] Uninit was stored to memory at: [ 1097.314039][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.319755][T21374] __msan_chain_origin+0x50/0x90 [ 1097.324694][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.329808][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.334860][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.339363][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.344053][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.350139][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.356296][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.361501][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.366354][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.370861][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.377173][T21374] [ 1097.379498][T21374] Uninit was stored to memory at: [ 1097.384544][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.390291][T21374] __msan_chain_origin+0x50/0x90 [ 1097.395234][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.400349][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.405288][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.409792][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.414481][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.420682][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.426841][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.432048][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.436900][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.441411][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.447722][T21374] [ 1097.450038][T21374] Uninit was stored to memory at: [ 1097.455071][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.460818][T21374] __msan_chain_origin+0x50/0x90 [ 1097.465758][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.470872][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.475810][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.480312][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.484990][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.491059][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.497227][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.502424][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.507271][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.511864][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.518174][T21374] [ 1097.520491][T21374] Uninit was stored to memory at: [ 1097.525517][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.531238][T21374] __msan_chain_origin+0x50/0x90 [ 1097.536179][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.541295][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.546234][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.550738][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.555419][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.561487][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.567641][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.572842][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.577711][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.582217][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.588527][T21374] [ 1097.590848][T21374] Uninit was stored to memory at: [ 1097.595875][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.601597][T21374] __msan_chain_origin+0x50/0x90 [ 1097.606542][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.611657][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.616595][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.621102][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.625782][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.631942][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.638095][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.643298][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.648153][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.652693][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.659004][T21374] [ 1097.661323][T21374] Uninit was stored to memory at: [ 1097.666352][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1097.672071][T21374] __msan_chain_origin+0x50/0x90 [ 1097.677015][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1097.682132][T21374] get_compat_msghdr+0x108/0x2b0 [ 1097.687070][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1097.691572][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1097.696250][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1097.702339][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1097.708493][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1097.713736][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1097.718630][T21374] do_SYSENTER_32+0x73/0x90 [ 1097.723139][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1097.729450][T21374] [ 1097.731773][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1097.738448][T21374] do_recvmmsg+0xbf/0x22c0 [ 1097.742881][T21374] do_recvmmsg+0xbf/0x22c0 [ 1097.972650][T21374] not chained 220000 origins [ 1097.977503][T21374] CPU: 0 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1097.986171][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.996223][T21374] Call Trace: [ 1097.999524][T21374] dump_stack+0x21c/0x280 [ 1098.003872][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1098.009602][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.014805][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1098.020370][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1098.026441][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.031641][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1098.037448][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1098.043514][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.048715][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1098.054379][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1098.060453][T21374] ? _copy_from_user+0x201/0x310 [ 1098.065397][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.070600][T21374] __msan_chain_origin+0x50/0x90 [ 1098.075542][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.080680][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.085643][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.090154][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1098.095973][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.101180][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1098.107077][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1098.112294][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1098.117930][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1098.123218][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1098.127975][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1098.132743][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.137436][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.143515][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.149673][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.154890][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.159939][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.164477][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.170800][T21374] RIP: 0023:0xf7f34549 [ 1098.174854][T21374] Code: Bad RIP value. [ 1098.178915][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1098.187323][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1098.195315][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1098.203294][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1098.211263][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1098.219228][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1098.227202][T21374] Uninit was stored to memory at: [ 1098.232235][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.237965][T21374] __msan_chain_origin+0x50/0x90 [ 1098.242904][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.248013][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.252951][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.257451][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.262128][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.268196][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.274352][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.279554][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.284408][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.288911][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.295227][T21374] [ 1098.297554][T21374] Uninit was stored to memory at: [ 1098.302580][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.308297][T21374] __msan_chain_origin+0x50/0x90 [ 1098.313389][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.318506][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.323444][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.327943][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.332631][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.338699][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.350500][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.355717][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.360567][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.365071][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.371386][T21374] [ 1098.373703][T21374] Uninit was stored to memory at: [ 1098.378831][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.384569][T21374] __msan_chain_origin+0x50/0x90 [ 1098.389518][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.394643][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.399579][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.404086][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.408769][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.414955][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.421116][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.426315][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.431172][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.435686][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.442002][T21374] [ 1098.444323][T21374] Uninit was stored to memory at: [ 1098.449352][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.455076][T21374] __msan_chain_origin+0x50/0x90 [ 1098.460021][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.465162][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.470095][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.474599][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.479275][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.485348][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.491506][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.496730][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.501583][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.506090][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.512401][T21374] [ 1098.514721][T21374] Uninit was stored to memory at: [ 1098.519748][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.525474][T21374] __msan_chain_origin+0x50/0x90 [ 1098.530406][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.535513][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.540448][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.545124][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.549805][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.556047][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.562207][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.567407][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.572256][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.576759][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.583072][T21374] [ 1098.585395][T21374] Uninit was stored to memory at: [ 1098.590420][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.596146][T21374] __msan_chain_origin+0x50/0x90 [ 1098.601185][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.606298][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.611238][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.615757][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.620439][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.626512][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.632670][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.637872][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.642722][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.647224][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.653555][T21374] [ 1098.655897][T21374] Uninit was stored to memory at: [ 1098.660932][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1098.666676][T21374] __msan_chain_origin+0x50/0x90 [ 1098.671619][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1098.676733][T21374] get_compat_msghdr+0x108/0x2b0 [ 1098.681671][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1098.686172][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1098.691000][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1098.697073][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1098.703231][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1098.708432][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1098.713285][T21374] do_SYSENTER_32+0x73/0x90 [ 1098.717788][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1098.724189][T21374] [ 1098.726511][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1098.733182][T21374] do_recvmmsg+0xbf/0x22c0 [ 1098.737602][T21374] do_recvmmsg+0xbf/0x22c0 [ 1098.942646][T21401] not chained 230000 origins [ 1098.947275][T21401] CPU: 0 PID: 21401 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1098.955939][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.965991][T21401] Call Trace: [ 1098.969292][T21401] dump_stack+0x21c/0x280 [ 1098.973635][T21401] kmsan_internal_chain_origin+0x6f/0x130 [ 1098.979372][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1098.984578][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1098.990137][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1098.996236][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1099.001445][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1099.007259][T21401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1099.013329][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1099.018715][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1099.024356][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1099.030436][T21401] ? _copy_from_user+0x201/0x310 [ 1099.035379][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1099.040585][T21401] __msan_chain_origin+0x50/0x90 [ 1099.045701][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.050828][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.055772][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.060281][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1099.066098][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1099.071398][T21401] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1099.077405][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1099.082602][T21401] ? kmsan_internal_set_origin+0x75/0xb0 [ 1099.088243][T21401] ? __msan_poison_alloca+0xf0/0x120 [ 1099.093553][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1099.098321][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1099.103086][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.107780][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.113946][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.120118][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.125328][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.130183][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.134692][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.141043][T21401] RIP: 0023:0xf7f34549 [ 1099.145103][T21401] Code: Bad RIP value. [ 1099.149256][T21401] RSP: 002b:00000000f54cb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1099.157666][T21401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1099.165640][T21401] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1099.173611][T21401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.181583][T21401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1099.189556][T21401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.197537][T21401] Uninit was stored to memory at: [ 1099.202569][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.208299][T21401] __msan_chain_origin+0x50/0x90 [ 1099.213253][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.218364][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.223305][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.227807][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.232501][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.238571][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.244734][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.249938][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.254881][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.259391][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.265708][T21401] [ 1099.268029][T21401] Uninit was stored to memory at: [ 1099.273068][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.278788][T21401] __msan_chain_origin+0x50/0x90 [ 1099.283727][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.288932][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.293865][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.298364][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.303044][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.309116][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.315273][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.320479][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.325330][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.329832][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.336145][T21401] [ 1099.338466][T21401] Uninit was stored to memory at: [ 1099.343493][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.349301][T21401] __msan_chain_origin+0x50/0x90 [ 1099.354331][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.359644][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.364580][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.369081][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.373768][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.379845][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.386011][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.391216][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.396069][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.400692][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.407005][T21401] [ 1099.409328][T21401] Uninit was stored to memory at: [ 1099.414364][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.420091][T21401] __msan_chain_origin+0x50/0x90 [ 1099.425033][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.430151][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.435090][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.439592][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.444271][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.450342][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.456500][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.461711][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.466568][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.471095][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.477417][T21401] [ 1099.479739][T21401] Uninit was stored to memory at: [ 1099.484770][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.490491][T21401] __msan_chain_origin+0x50/0x90 [ 1099.495433][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.500550][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.505486][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.510078][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.514763][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.520835][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.526987][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.532189][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.537041][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.541547][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.547859][T21401] [ 1099.550177][T21401] Uninit was stored to memory at: [ 1099.555206][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.560943][T21401] __msan_chain_origin+0x50/0x90 [ 1099.565881][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.570993][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.575934][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.580438][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.585118][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.591189][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.597344][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.602541][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.607391][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.611893][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.618211][T21401] [ 1099.620538][T21401] Uninit was stored to memory at: [ 1099.625570][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1099.631382][T21401] __msan_chain_origin+0x50/0x90 [ 1099.636333][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1099.641445][T21401] get_compat_msghdr+0x108/0x2b0 [ 1099.646391][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1099.650900][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1099.655580][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1099.661649][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1099.667804][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1099.673103][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1099.677964][T21401] do_SYSENTER_32+0x73/0x90 [ 1099.682466][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1099.688777][T21401] [ 1099.691099][T21401] Local variable ----msg_sys@do_recvmmsg created at: [ 1099.697777][T21401] do_recvmmsg+0xbf/0x22c0 [ 1099.702194][T21401] do_recvmmsg+0xbf/0x22c0 [ 1100.282642][T21374] not chained 240000 origins [ 1100.287271][T21374] CPU: 1 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1100.295937][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.305988][T21374] Call Trace: [ 1100.309284][T21374] dump_stack+0x21c/0x280 [ 1100.313623][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1100.319351][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.324645][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1100.330197][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1100.336262][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.341595][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.347403][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1100.353465][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.358663][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1100.364300][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1100.370378][T21374] ? _copy_from_user+0x201/0x310 [ 1100.375406][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.380606][T21374] __msan_chain_origin+0x50/0x90 [ 1100.385545][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1100.390669][T21374] get_compat_msghdr+0x108/0x2b0 [ 1100.395612][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1100.400116][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.406047][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.411268][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1100.417166][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1100.422372][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1100.428007][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1100.433294][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1100.438139][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1100.440984][T21401] not chained 250000 origins [ 1100.442903][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1100.452147][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.458213][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.464350][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1100.469544][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1100.474488][T21374] do_SYSENTER_32+0x73/0x90 [ 1100.478978][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.485283][T21374] RIP: 0023:0xf7f34549 [ 1100.489327][T21374] Code: Bad RIP value. [ 1100.493373][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1100.501768][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1100.509719][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1100.517671][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1100.525637][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1100.533592][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1100.541555][T21374] Uninit was stored to memory at: [ 1100.541569][T21401] CPU: 0 PID: 21401 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1100.541585][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.546592][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1100.555224][T21401] Call Trace: [ 1100.565267][T21374] __msan_chain_origin+0x50/0x90 [ 1100.570971][T21401] dump_stack+0x21c/0x280 [ 1100.574230][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1100.579212][T21401] kmsan_internal_chain_origin+0x6f/0x130 [ 1100.583527][T21374] get_compat_msghdr+0x108/0x2b0 [ 1100.588612][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.594298][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1100.599209][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1100.604384][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1100.608867][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1100.614412][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.619061][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.625107][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.631145][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.636318][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1100.642445][T21401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1100.648235][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1100.653405][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.659447][T21374] do_SYSENTER_32+0x73/0x90 [ 1100.664268][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1100.669448][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.673928][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1100.679432][T21374] [ 1100.685743][T21401] ? _copy_from_user+0x201/0x310 [ 1100.691772][T21374] Uninit was stored to memory at: [ 1100.694087][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.698996][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1100.703989][T21401] __msan_chain_origin+0x50/0x90 [ 1100.709156][T21374] __msan_chain_origin+0x50/0x90 [ 1100.714849][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1100.720015][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1100.724940][T21401] get_compat_msghdr+0x108/0x2b0 [ 1100.730018][T21374] get_compat_msghdr+0x108/0x2b0 [ 1100.735103][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1100.740009][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1100.744926][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1100.749420][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1100.753905][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.759674][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.764333][T21401] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1100.769506][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.775543][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1100.781410][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1100.787532][T21401] ? kmsan_internal_set_origin+0x75/0xb0 [ 1100.792702][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1100.797869][T21401] ? __msan_poison_alloca+0xf0/0x120 [ 1100.803473][T21374] do_SYSENTER_32+0x73/0x90 [ 1100.808296][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1100.813558][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.818043][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1100.822766][T21374] [ 1100.829072][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1100.833796][T21374] Uninit was stored to memory at: [ 1100.836120][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.840761][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1100.845760][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.851793][T21374] __msan_chain_origin+0x50/0x90 [ 1100.857485][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1100.863619][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1100.868527][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1100.873707][T21374] get_compat_msghdr+0x108/0x2b0 [ 1100.878791][T21401] do_SYSENTER_32+0x73/0x90 [ 1100.883614][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1100.888527][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.893001][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1100.897483][T21401] RIP: 0023:0xf7f34549 [ 1100.903789][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1100.908442][T21401] Code: Bad RIP value. [ 1100.912493][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1100.918522][T21401] RSP: 002b:00000000f54cb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1100.922573][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1100.928693][T21401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1100.937079][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1100.942254][T21401] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1100.950208][T21374] do_SYSENTER_32+0x73/0x90 [ 1100.955030][T21401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1100.962981][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1100.967459][T21401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1100.975403][T21374] [ 1100.981719][T21401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1100.989672][T21374] Uninit was stored to memory at: [ 1100.991996][T21401] Uninit was stored to memory at: [ 1100.999951][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1101.004946][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.009945][T21374] __msan_chain_origin+0x50/0x90 [ 1101.015637][T21401] __msan_chain_origin+0x50/0x90 [ 1101.021329][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1101.026251][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.031162][T21374] get_compat_msghdr+0x108/0x2b0 [ 1101.036245][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.041328][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1101.046237][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.051144][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1101.055617][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.060095][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.064743][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.069399][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.075439][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.081566][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1101.087687][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.093811][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1101.098992][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.104171][T21374] do_SYSENTER_32+0x73/0x90 [ 1101.108994][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.113818][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.118291][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.122752][T21374] [ 1101.129049][T21401] [ 1101.135349][T21374] Uninit was stored to memory at: [ 1101.137654][T21401] Uninit was stored to memory at: [ 1101.139968][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1101.144963][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.149961][T21374] __msan_chain_origin+0x50/0x90 [ 1101.155769][T21401] __msan_chain_origin+0x50/0x90 [ 1101.161463][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1101.166380][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.171307][T21374] get_compat_msghdr+0x108/0x2b0 [ 1101.176391][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.181474][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1101.186374][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.186395][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.191395][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1101.195877][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.200348][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.204998][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.209644][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.215681][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.221727][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1101.227858][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.234003][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1101.239176][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.244345][T21374] do_SYSENTER_32+0x73/0x90 [ 1101.249170][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.253990][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.258467][T21401] [ 1101.262942][T21374] [ 1101.276791][T21401] Uninit was stored to memory at: [ 1101.283089][T21374] Uninit was stored to memory at: [ 1101.285406][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.287713][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1101.292711][T21401] __msan_chain_origin+0x50/0x90 [ 1101.297723][T21374] __msan_chain_origin+0x50/0x90 [ 1101.303417][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.309106][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1101.314017][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.318940][T21374] get_compat_msghdr+0x108/0x2b0 [ 1101.324023][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.329106][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1101.334014][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.338925][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1101.343419][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.347893][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.352544][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.357191][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.363229][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.369263][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1101.375391][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.381534][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1101.386722][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.391898][T21374] do_SYSENTER_32+0x73/0x90 [ 1101.396731][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.401555][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.406021][T21401] [ 1101.410511][T21374] [ 1101.416821][T21401] Uninit was stored to memory at: [ 1101.423123][T21374] Uninit was stored to memory at: [ 1101.425448][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.427753][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1101.432750][T21401] __msan_chain_origin+0x50/0x90 [ 1101.437749][T21374] __msan_chain_origin+0x50/0x90 [ 1101.443444][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.449132][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1101.454041][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.458950][T21374] get_compat_msghdr+0x108/0x2b0 [ 1101.464047][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.469223][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1101.474131][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.479030][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1101.479054][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.483530][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.488007][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.492668][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.497317][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1101.503355][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.509394][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1101.515605][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.521743][T21374] do_SYSENTER_32+0x73/0x90 [ 1101.526914][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.532085][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.536921][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.541733][T21374] [ 1101.546207][T21401] [ 1101.550688][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1101.556984][T21401] Uninit was stored to memory at: [ 1101.563304][T21374] do_recvmmsg+0xbf/0x22c0 [ 1101.565624][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.567950][T21374] do_recvmmsg+0xbf/0x22c0 [ 1101.574610][T21401] __msan_chain_origin+0x50/0x90 [ 1101.599032][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.604153][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.609093][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.613609][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.618290][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.624375][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.630643][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.635853][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.640711][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.645250][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.651563][T21401] [ 1101.653881][T21401] Uninit was stored to memory at: [ 1101.658909][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.664654][T21401] __msan_chain_origin+0x50/0x90 [ 1101.669594][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.674716][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.679652][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.684159][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.688855][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.694927][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.701084][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.706298][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.711147][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.715646][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.721957][T21401] [ 1101.724277][T21401] Uninit was stored to memory at: [ 1101.729297][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1101.735016][T21401] __msan_chain_origin+0x50/0x90 [ 1101.740058][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1101.745170][T21401] get_compat_msghdr+0x108/0x2b0 [ 1101.750203][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1101.754714][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1101.759429][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1101.765502][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1101.771659][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1101.776861][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1101.781722][T21401] do_SYSENTER_32+0x73/0x90 [ 1101.786278][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1101.792592][T21401] [ 1101.794914][T21401] Local variable ----msg_sys@do_recvmmsg created at: [ 1101.801589][T21401] do_recvmmsg+0xbf/0x22c0 [ 1101.806004][T21401] do_recvmmsg+0xbf/0x22c0 [ 1102.129153][T21401] not chained 260000 origins [ 1102.133901][T21401] CPU: 0 PID: 21401 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1102.142567][T21401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.152617][T21401] Call Trace: [ 1102.155916][T21401] dump_stack+0x21c/0x280 [ 1102.160259][T21401] kmsan_internal_chain_origin+0x6f/0x130 [ 1102.165987][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.171189][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1102.176915][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1102.183009][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.188212][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.194039][T21401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1102.200125][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.205327][T21401] ? kmsan_set_origin_checked+0x95/0xf0 [ 1102.210880][T21401] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1102.216955][T21401] ? _copy_from_user+0x201/0x310 [ 1102.221898][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.227102][T21401] __msan_chain_origin+0x50/0x90 [ 1102.232048][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.237183][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.242135][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.246647][T21401] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1102.252481][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.257702][T21401] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1102.263929][T21401] ? kmsan_get_metadata+0x116/0x180 [ 1102.269173][T21401] ? kmsan_internal_set_origin+0x75/0xb0 [ 1102.274810][T21401] ? __msan_poison_alloca+0xf0/0x120 [ 1102.280102][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1102.284868][T21401] ? __sys_recvmmsg+0xbb/0x610 [ 1102.289642][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.294345][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.300424][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.306581][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.311809][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.316682][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.321195][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.327521][T21401] RIP: 0023:0xf7f34549 [ 1102.331579][T21401] Code: Bad RIP value. [ 1102.335639][T21401] RSP: 002b:00000000f54cb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1102.344166][T21401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1102.352138][T21401] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1102.360108][T21401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1102.368081][T21401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1102.376052][T21401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1102.384142][T21401] Uninit was stored to memory at: [ 1102.389175][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.394901][T21401] __msan_chain_origin+0x50/0x90 [ 1102.399847][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.404967][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.409911][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.414437][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.419126][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.425200][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.431372][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.436584][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.441438][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.445945][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.452287][T21401] [ 1102.454614][T21401] Uninit was stored to memory at: [ 1102.459648][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.465369][T21401] __msan_chain_origin+0x50/0x90 [ 1102.470311][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.475420][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.480358][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.484855][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.489528][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.495599][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.501752][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.506962][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.511810][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.516310][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.522623][T21401] [ 1102.524939][T21401] Uninit was stored to memory at: [ 1102.529975][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.535706][T21401] __msan_chain_origin+0x50/0x90 [ 1102.540641][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.545760][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.550692][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.555180][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.559846][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.565915][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.572057][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.577241][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.582078][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.586577][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.592879][T21401] [ 1102.595190][T21401] Uninit was stored to memory at: [ 1102.600202][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.605917][T21401] __msan_chain_origin+0x50/0x90 [ 1102.610840][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.615935][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.620856][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.625343][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.630007][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.636061][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.642202][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.647389][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.652236][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.656725][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.663028][T21401] [ 1102.665343][T21401] Uninit was stored to memory at: [ 1102.670356][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.676182][T21401] __msan_chain_origin+0x50/0x90 [ 1102.681123][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.686221][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.691144][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.695630][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.700294][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.706347][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.712488][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.717678][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.722623][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.727116][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.733423][T21401] [ 1102.735756][T21401] Uninit was stored to memory at: [ 1102.740768][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.746577][T21401] __msan_chain_origin+0x50/0x90 [ 1102.751501][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.756600][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.761523][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.766013][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.770683][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.776738][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.782878][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.788066][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.792904][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.797400][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.803707][T21401] [ 1102.806018][T21401] Uninit was stored to memory at: [ 1102.811032][T21401] kmsan_internal_chain_origin+0xad/0x130 [ 1102.816742][T21401] __msan_chain_origin+0x50/0x90 [ 1102.821673][T21401] __get_compat_msghdr+0x6db/0x9d0 [ 1102.826772][T21401] get_compat_msghdr+0x108/0x2b0 [ 1102.831815][T21401] do_recvmmsg+0xdbb/0x22c0 [ 1102.836306][T21401] __sys_recvmmsg+0x5dd/0x610 [ 1102.840987][T21401] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1102.847042][T21401] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1102.853185][T21401] __do_fast_syscall_32+0x2af/0x480 [ 1102.858375][T21401] do_fast_syscall_32+0x6b/0xd0 [ 1102.863386][T21401] do_SYSENTER_32+0x73/0x90 [ 1102.867879][T21401] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1102.874196][T21401] [ 1102.876512][T21401] Local variable ----msg_sys@do_recvmmsg created at: [ 1102.883174][T21401] do_recvmmsg+0xbf/0x22c0 [ 1102.887577][T21401] do_recvmmsg+0xbf/0x22c0 [ 1103.010066][T21374] not chained 270000 origins [ 1103.014695][T21374] CPU: 0 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1103.023363][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.033417][T21374] Call Trace: [ 1103.036729][T21374] dump_stack+0x21c/0x280 [ 1103.041068][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1103.046882][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.052084][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1103.057635][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1103.063811][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.069109][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.074933][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1103.081005][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.086299][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1103.091850][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1103.097924][T21374] ? _copy_from_user+0x201/0x310 [ 1103.102869][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.108067][T21374] __msan_chain_origin+0x50/0x90 [ 1103.113012][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.118144][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.123106][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.127614][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.133431][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.138639][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1103.144543][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.149746][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1103.155382][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1103.160675][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1103.165439][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1103.170211][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.174904][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.181109][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.187264][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.192471][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.197327][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.201837][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.208158][T21374] RIP: 0023:0xf7f34549 [ 1103.212215][T21374] Code: Bad RIP value. [ 1103.216289][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1103.224784][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1103.232849][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1103.240820][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.248786][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1103.256771][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.264741][T21374] Uninit was stored to memory at: [ 1103.269772][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.275644][T21374] __msan_chain_origin+0x50/0x90 [ 1103.280572][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.285682][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.290711][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.295302][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.299970][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.306024][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.312165][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.317348][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.322185][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.326679][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.332979][T21374] [ 1103.335287][T21374] Uninit was stored to memory at: [ 1103.340302][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.346006][T21374] __msan_chain_origin+0x50/0x90 [ 1103.350932][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.356027][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.360950][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.365438][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.370104][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.376155][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.382295][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.387478][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.392316][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.396806][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.403111][T21374] [ 1103.405419][T21374] Uninit was stored to memory at: [ 1103.410433][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.416157][T21374] __msan_chain_origin+0x50/0x90 [ 1103.421099][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.426204][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.431159][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.435653][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.440327][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.446393][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.452622][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.457806][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.462645][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.467143][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.473445][T21374] [ 1103.475757][T21374] Uninit was stored to memory at: [ 1103.480769][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.486474][T21374] __msan_chain_origin+0x50/0x90 [ 1103.491398][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.496498][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.501421][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.505911][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.510575][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.516648][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.522791][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.527976][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.532812][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.537302][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.543607][T21374] [ 1103.545917][T21374] Uninit was stored to memory at: [ 1103.550941][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.556652][T21374] __msan_chain_origin+0x50/0x90 [ 1103.561577][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.566677][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.571598][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.576085][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.580749][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.586801][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.592941][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.598125][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.602962][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.607451][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.613752][T21374] [ 1103.616064][T21374] Uninit was stored to memory at: [ 1103.621095][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.626909][T21374] __msan_chain_origin+0x50/0x90 [ 1103.631832][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.636933][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.641856][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.646343][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.651011][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.657063][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.663289][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.668472][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.673307][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.677806][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.684121][T21374] [ 1103.686434][T21374] Uninit was stored to memory at: [ 1103.691448][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1103.697151][T21374] __msan_chain_origin+0x50/0x90 [ 1103.702077][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1103.707274][T21374] get_compat_msghdr+0x108/0x2b0 [ 1103.712198][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1103.716685][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1103.721349][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1103.727402][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1103.733543][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1103.738726][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1103.743560][T21374] do_SYSENTER_32+0x73/0x90 [ 1103.748048][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1103.754348][T21374] [ 1103.756663][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1103.763322][T21374] do_recvmmsg+0xbf/0x22c0 [ 1103.767720][T21374] do_recvmmsg+0xbf/0x22c0 [ 1103.922969][T21374] not chained 280000 origins [ 1103.927601][T21374] CPU: 0 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1103.936283][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.946337][T21374] Call Trace: [ 1103.949641][T21374] dump_stack+0x21c/0x280 [ 1103.953981][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1103.959707][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.964910][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1103.970460][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1103.976534][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.981736][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1103.987546][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1103.993657][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1103.998859][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1104.004413][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1104.010489][T21374] ? _copy_from_user+0x201/0x310 [ 1104.015441][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.020648][T21374] __msan_chain_origin+0x50/0x90 [ 1104.025593][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.030731][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.035686][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.040201][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.046020][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.051225][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1104.057121][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.062323][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1104.067959][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1104.073333][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1104.078094][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1104.083220][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.087915][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.093994][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.100149][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.105357][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.110209][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.114728][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.121058][T21374] RIP: 0023:0xf7f34549 [ 1104.125116][T21374] Code: Bad RIP value. [ 1104.129175][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1104.137670][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1104.145642][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1104.153611][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.161583][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1104.169634][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.177704][T21374] Uninit was stored to memory at: [ 1104.182725][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.188445][T21374] __msan_chain_origin+0x50/0x90 [ 1104.193370][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.198589][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.203517][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.208012][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.212677][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.218728][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.224870][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.230057][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.234896][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.239386][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.245686][T21374] [ 1104.247994][T21374] Uninit was stored to memory at: [ 1104.253131][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.258843][T21374] __msan_chain_origin+0x50/0x90 [ 1104.263771][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.268872][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.273797][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.278287][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.282952][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.289015][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.295250][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.300441][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.305282][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.309775][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.316078][T21374] [ 1104.318404][T21374] Uninit was stored to memory at: [ 1104.323428][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.329148][T21374] __msan_chain_origin+0x50/0x90 [ 1104.334077][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.339182][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.344110][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.348604][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.353281][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.359347][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.365494][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.370684][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.375627][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.380119][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.386523][T21374] [ 1104.388835][T21374] Uninit was stored to memory at: [ 1104.393865][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.399591][T21374] __msan_chain_origin+0x50/0x90 [ 1104.404524][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.409623][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.414551][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.419049][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.423727][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.429783][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.435925][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.441119][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.445959][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.450451][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.456754][T21374] [ 1104.459063][T21374] Uninit was stored to memory at: [ 1104.464086][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.469787][T21374] __msan_chain_origin+0x50/0x90 [ 1104.474707][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.479802][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.484724][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.489213][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.493878][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.499943][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.506089][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.511300][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.516138][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.520629][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.526930][T21374] [ 1104.529238][T21374] Uninit was stored to memory at: [ 1104.534252][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.539958][T21374] __msan_chain_origin+0x50/0x90 [ 1104.544884][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.549984][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.554907][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.559409][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.564083][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.570250][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.576390][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.581577][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.586413][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.590904][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.597208][T21374] [ 1104.599519][T21374] Uninit was stored to memory at: [ 1104.604540][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1104.610248][T21374] __msan_chain_origin+0x50/0x90 [ 1104.615182][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.620281][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.625205][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.629693][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1104.634361][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1104.640526][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1104.646669][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1104.651855][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1104.656690][T21374] do_SYSENTER_32+0x73/0x90 [ 1104.661184][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1104.667487][T21374] [ 1104.669799][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1104.676459][T21374] do_recvmmsg+0xbf/0x22c0 [ 1104.680861][T21374] do_recvmmsg+0xbf/0x22c0 [ 1104.854325][T21374] not chained 290000 origins [ 1104.858960][T21374] CPU: 1 PID: 21374 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 1104.867622][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.877676][T21374] Call Trace: [ 1104.880974][T21374] dump_stack+0x21c/0x280 [ 1104.885318][T21374] kmsan_internal_chain_origin+0x6f/0x130 [ 1104.891045][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.896262][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1104.901811][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1104.907879][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.913078][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.918902][T21374] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1104.924976][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.930182][T21374] ? kmsan_set_origin_checked+0x95/0xf0 [ 1104.935725][T21374] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1104.941795][T21374] ? _copy_from_user+0x201/0x310 [ 1104.946731][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.951929][T21374] __msan_chain_origin+0x50/0x90 [ 1104.956907][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1104.962033][T21374] get_compat_msghdr+0x108/0x2b0 [ 1104.966977][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1104.971485][T21374] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1104.977299][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.982499][T21374] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1104.988401][T21374] ? kmsan_get_metadata+0x116/0x180 [ 1104.993715][T21374] ? kmsan_internal_set_origin+0x75/0xb0 [ 1104.999348][T21374] ? __msan_poison_alloca+0xf0/0x120 [ 1105.004630][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1105.009398][T21374] ? __sys_recvmmsg+0xbb/0x610 [ 1105.014156][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.018841][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.024929][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.031201][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.036524][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.041368][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.045864][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.052188][T21374] RIP: 0023:0xf7f34549 [ 1105.056235][T21374] Code: Bad RIP value. [ 1105.060283][T21374] RSP: 002b:00000000f550d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1105.068678][T21374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1105.076634][T21374] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1105.084603][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.092562][T21374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1105.100535][T21374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.108519][T21374] Uninit was stored to memory at: [ 1105.113542][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.119248][T21374] __msan_chain_origin+0x50/0x90 [ 1105.124181][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.129375][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.134395][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.138892][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.143561][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.149619][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.155770][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.160958][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.165802][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.170293][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.176597][T21374] [ 1105.178906][T21374] Uninit was stored to memory at: [ 1105.183919][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.189747][T21374] __msan_chain_origin+0x50/0x90 [ 1105.194679][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.199787][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.204743][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.209239][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.213907][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.219963][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.226105][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.231294][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.236128][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.240622][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.246927][T21374] [ 1105.249243][T21374] Uninit was stored to memory at: [ 1105.254277][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.259991][T21374] __msan_chain_origin+0x50/0x90 [ 1105.264925][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.270026][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.274969][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.279459][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.284124][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.290201][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.296361][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.301561][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.306399][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.310890][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.317193][T21374] [ 1105.319505][T21374] Uninit was stored to memory at: [ 1105.324529][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.330233][T21374] __msan_chain_origin+0x50/0x90 [ 1105.335157][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.340254][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.345272][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.349760][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.354423][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.360489][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.366639][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.371823][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.376657][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.381146][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.387450][T21374] [ 1105.389759][T21374] Uninit was stored to memory at: [ 1105.394772][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.400496][T21374] __msan_chain_origin+0x50/0x90 [ 1105.405441][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.410547][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.415476][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.419974][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.424647][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.430709][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.436851][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.442038][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.446886][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.451380][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.457684][T21374] [ 1105.459997][T21374] Uninit was stored to memory at: [ 1105.465010][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.470715][T21374] __msan_chain_origin+0x50/0x90 [ 1105.475639][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.480738][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.485658][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.490282][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.494945][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.501000][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.507140][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.512324][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.517179][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.521681][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.527986][T21374] [ 1105.530297][T21374] Uninit was stored to memory at: [ 1105.535310][T21374] kmsan_internal_chain_origin+0xad/0x130 [ 1105.541015][T21374] __msan_chain_origin+0x50/0x90 [ 1105.545941][T21374] __get_compat_msghdr+0x6db/0x9d0 [ 1105.551037][T21374] get_compat_msghdr+0x108/0x2b0 [ 1105.555958][T21374] do_recvmmsg+0xdbb/0x22c0 [ 1105.560449][T21374] __sys_recvmmsg+0x5dd/0x610 [ 1105.565129][T21374] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1105.571194][T21374] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1105.577334][T21374] __do_fast_syscall_32+0x2af/0x480 [ 1105.582516][T21374] do_fast_syscall_32+0x6b/0xd0 [ 1105.587349][T21374] do_SYSENTER_32+0x73/0x90 [ 1105.591839][T21374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1105.598139][T21374] [ 1105.600449][T21374] Local variable ----msg_sys@do_recvmmsg created at: [ 1105.607125][T21374] do_recvmmsg+0xbf/0x22c0 [ 1105.611542][T21374] do_recvmmsg+0xbf/0x22c0 15:37:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:37:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x1b0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x37, &(0x7f0000000080)='a', 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 15:37:53 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x2008001) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 15:37:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:37:53 executing program 2: r0 = socket(0xa, 0x3, 0x6) getsockopt$nfc_llcp(r0, 0x29, 0x12, 0x0, 0x531000) 15:37:53 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:37:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) 15:37:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 15:37:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000300df0000000000000000000084000000000000000000000000000000000000000000000000200000000000000000000000000000000001000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000feffffff00000000000000000000000000000074b6628ddfb1cc186d6300000000000000000073797a310000000000000000000000010000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaba86b97eec0b2bed1ee23364b1"], 0x12e) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup2(r1, r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 15:37:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x0, 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="360029bd7000fbdbdf25060000000800020007000000959e054b07000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008880) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000500)='/dev/vcsu\x00', 0x408400, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e23}, 0x6e) link(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) 15:37:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:37:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001600)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) [ 1108.248685][T10040] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max [ 1108.439831][T10040] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on %z5 [ 1108.473141][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1108.486358][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1108.494518][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1108.502478][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1108.510648][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1108.518877][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1108.526898][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1108.543468][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1108.560669][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1108.568439][T21489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:37:56 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:37:56 executing program 1: io_uring_setup(0x201b, &(0x7f0000000000)={0x0, 0x0, 0x27}) 15:37:57 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8000}) 15:37:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0014ebbee07962c22772e11b44e65d76641cb69d952f41bdd2ac8bb8c43", 0x2e}], 0x1) 15:37:57 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:37:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) r0 = gettid() tkill(r0, 0x31) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 15:37:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15:37:57 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 15:37:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x6) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 1109.601306][T21514] binder: 21506:21514 unknown command 0 [ 1109.606964][T21514] binder: 21506:21514 ioctl c0306201 20000200 returned -22 15:37:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x2, @raw_data="d19384f98c5c6342520237a1fee282edddac80d15d85bd871f8ed5a1fecaedfe65ded7d2e7add52f2646f7681f04f467ada342324e72be5698bdb1c0eae6f0c0942990a5b78f11120cb5c36dbecb0dc535fc4054b2c041b9f11efc0fa587a0756d67fe0d4b3bead6687ca6b8effd203abb86e49d1c0dbd44920947f987130f75eb6334a7880ef3cf40189c90f3d8e8187efbb245336b2831477c0d188cd9ff929d86ee8147f68b1fbcd96a1fa336f2c2c5c0dd46e75059a84342635524c9172f4aa613c192b99dde"}}) 15:37:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r1}, 0x8) [ 1110.005414][T21520] syz-executor.1 (21520): /proc/21518/oom_adj is deprecated, please use /proc/21518/oom_score_adj instead. 15:37:58 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 15:37:58 executing program 3: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x83, &(0x7f00000000c0)=""/195, &(0x7f00000001c0)=0xc3) 15:37:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x98) 15:37:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc048ae65, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 15:37:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000380), 0x10) 15:37:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r1, 0x0, 0x2, 0x4}}, 0x20) 15:37:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000280)={0x0, @vbi}) 15:37:59 executing program 1: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x87) 15:37:59 executing program 0: setuid(0xee00) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = geteuid() keyctl$chown(0x4, r0, r1, 0xee01) 15:37:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x8) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') openat$vcs(0xffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000005) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040801) 15:37:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 15:37:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x80010, 0xffffffffffffffff, 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x126, 0x420000) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/4\x00') sendfile(r1, r2, &(0x7f0000000240)=0xf101, 0x4000000000dc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x66, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1b860}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x3, 0x8, 0xf672, 0x3d, @rand_addr=' \x01\x00', @empty, 0x80, 0x8, 0x80000000, 0x20000}}) sendmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0xffffff2a}}], 0x1, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000100)=""/15, 0xf) 15:37:59 executing program 3: mremap(&(0x7f0000186000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00007a3000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) 15:37:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0x1f1}, 0x48) 15:37:59 executing program 2: io_setup(0x9, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}) [ 1112.017827][T21565] device batadv0 entered promiscuous mode [ 1112.116633][T21565] device batadv0 left promiscuous mode 15:38:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) [ 1112.345363][T21571] device batadv0 entered promiscuous mode 15:38:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) [ 1112.433594][T21571] device batadv0 left promiscuous mode 15:38:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = dup2(r0, r0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 15:38:00 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x56c, 0x8}}], 0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0307000300fffffcfe000100000004000180"], 0x18}}, 0x0) 15:38:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 1112.939856][T21594] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:38:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x40) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, 0x20) 15:38:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 1113.168098][T21594] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1113.194349][T21594] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1113.219564][T21594] gretap0: refused to change device tx_queue_len [ 1113.226212][T21594] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1113.237895][T21594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1113.422295][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1113.435645][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1113.443727][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 15:38:01 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58}}]}, 0x88}}, 0x0) 15:38:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0xfffffffffffffffe) 15:38:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x1b, 0x1c, 0x0, 0x0}) [ 1113.735458][T21611] gretap0: refused to change device tx_queue_len [ 1113.742215][T21611] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1113.750355][T21611] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 15:38:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="27c4ed424cbc87c00d2bbb3b79ded1282eaa4e45c1fa85001e6b3546344a956b62a9283eaae58b5508b0d2", 0x2b}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) sendmsg(0xffffffffffffffff, 0x0, 0xc100) 15:38:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000300)="92"}) 15:38:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:38:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="b4", 0x1, 0x0, 0x0, 0x0) 15:38:02 executing program 4: r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000440)=@newtaction={0x68, 0x12, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x0, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{}, {}, {}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:38:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) [ 1114.793883][T21644] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:38:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40187542, &(0x7f0000000080)) 15:38:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) 15:38:03 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x7ffff000, 0x0) 15:38:03 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000240)) 15:38:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x75, &(0x7f00000016c0)={r2}, &(0x7f0000001700)=0x8) 15:38:03 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000001, 0x9}, 0x8000, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x34d) pipe(&(0x7f0000000240)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 15:38:03 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = inotify_init1(0x0) dup(r1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 15:38:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x3f00) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 15:38:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x4000000000010044) 15:38:04 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14}, @NFT_MSG_DELOBJ={0x14}], {0x14}}, 0x70}}, 0x0) 15:38:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x3c}}, 0x0) 15:38:04 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) 15:38:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00000001c0)='*\xf7-{4\x00') 15:38:05 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) dup3(r1, r0, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) 15:38:05 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000000026) 15:38:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15:38:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 15:38:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020) fstat(0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getpid() openat$mixer(0xffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:38:05 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 15:38:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 15:38:06 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) epoll_create1(0x0) io_setup(0x4, &(0x7f00000004c0)) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) signalfd(r2, &(0x7f0000000100), 0x8) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x27518, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000ebff0000000000000002", @ANYRES32=0x0, @ANYBLOB="23000000000000001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000005) 15:38:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 15:38:07 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r1) 15:38:07 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB]) 15:38:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) exit_group(0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 1119.761853][T21727] not chained 300000 origins [ 1119.766494][T21727] CPU: 0 PID: 21727 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1119.775165][T21727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.785216][T21727] Call Trace: [ 1119.788514][T21727] dump_stack+0x21c/0x280 [ 1119.792851][T21727] kmsan_internal_chain_origin+0x6f/0x130 [ 1119.798573][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.803787][T21727] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1119.809604][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.814814][T21727] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1119.820627][T21727] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1119.826702][T21727] ? sched_clock_cpu+0x65/0x8e0 [ 1119.831563][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.836785][T21727] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1119.842703][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.847916][T21727] ? kmsan_set_origin_checked+0x95/0xf0 [ 1119.853466][T21727] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1119.859544][T21727] ? _copy_from_user+0x201/0x310 [ 1119.864499][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.869704][T21727] __msan_chain_origin+0x50/0x90 [ 1119.874648][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1119.879781][T21727] get_compat_msghdr+0x108/0x2b0 [ 1119.884736][T21727] __sys_sendmmsg+0x755/0xf70 [ 1119.889438][T21727] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1119.895339][T21727] ? __msan_poison_alloca+0xf0/0x120 [ 1119.900639][T21727] ? kmsan_copy_to_user+0x81/0x90 [ 1119.905669][T21727] ? _copy_to_user+0x1bf/0x260 [ 1119.910451][T21727] ? put_old_timespec32+0x231/0x2d0 [ 1119.915654][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.920861][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.926078][T21727] ? kmsan_get_metadata+0x116/0x180 [ 1119.931286][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1119.936674][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1119.942232][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1119.947447][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1119.952310][T21727] do_SYSENTER_32+0x73/0x90 [ 1119.956824][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.963151][T21727] RIP: 0023:0xf7f50549 [ 1119.967210][T21727] Code: Bad RIP value. [ 1119.971281][T21727] RSP: 002b:00000000f55080cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1119.980044][T21727] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200092c0 [ 1119.988021][T21727] RDX: 00000000000004ff RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.995999][T21727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.003970][T21727] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1120.011946][T21727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1120.020012][T21727] Uninit was stored to memory at: [ 1120.025045][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.030897][T21727] __msan_chain_origin+0x50/0x90 [ 1120.035846][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.040963][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.045905][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.050584][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.055961][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.061552][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.066756][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.071610][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.076117][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.082430][T21727] [ 1120.084754][T21727] Uninit was stored to memory at: [ 1120.089785][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.095511][T21727] __msan_chain_origin+0x50/0x90 [ 1120.100452][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.105563][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.110504][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.115182][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.120556][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.126105][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.131305][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.136161][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.140755][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.147072][T21727] [ 1120.149394][T21727] Uninit was stored to memory at: [ 1120.154443][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.160169][T21727] __msan_chain_origin+0x50/0x90 [ 1120.165194][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.170307][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.175242][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.179925][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.185305][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.190852][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.196056][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.200931][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.205439][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.211760][T21727] [ 1120.214086][T21727] Uninit was stored to memory at: [ 1120.219132][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.224859][T21727] __msan_chain_origin+0x50/0x90 [ 1120.229910][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.235028][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.239975][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.244660][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.250125][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.255677][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.260880][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.265736][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.270240][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.276552][T21727] [ 1120.278883][T21727] Uninit was stored to memory at: [ 1120.283921][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.289640][T21727] __msan_chain_origin+0x50/0x90 [ 1120.294578][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.299690][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.304624][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.309308][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.314786][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.320337][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.325540][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.330396][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.334902][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.341218][T21727] [ 1120.343542][T21727] Uninit was stored to memory at: [ 1120.348575][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.354302][T21727] __msan_chain_origin+0x50/0x90 [ 1120.359248][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.364397][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.369334][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.374013][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.379480][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.385031][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.390238][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.395093][T21727] do_SYSENTER_32+0x73/0x90 [ 1120.399603][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.405920][T21727] [ 1120.408246][T21727] Uninit was stored to memory at: [ 1120.413287][T21727] kmsan_internal_chain_origin+0xad/0x130 [ 1120.419025][T21727] __msan_chain_origin+0x50/0x90 [ 1120.423971][T21727] __get_compat_msghdr+0x6db/0x9d0 [ 1120.429088][T21727] get_compat_msghdr+0x108/0x2b0 [ 1120.434032][T21727] __sys_sendmmsg+0x755/0xf70 [ 1120.438717][T21727] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1120.444096][T21727] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1120.449647][T21727] __do_fast_syscall_32+0x2af/0x480 [ 1120.454854][T21727] do_fast_syscall_32+0x6b/0xd0 [ 1120.459706][T21727] do_SYSENTER_32+0x73/0x90 15:38:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x2103, 0x64}], 0x1, 0x0, 0x0, 0x0) [ 1120.464332][T21727] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1120.470660][T21727] [ 1120.473096][T21727] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1120.480032][T21727] __sys_sendmmsg+0xbb/0xf70 [ 1120.484620][T21727] __sys_sendmmsg+0xbb/0xf70 15:38:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x9, &(0x7f00000000c0)) [ 1121.944718][T21762] not chained 310000 origins [ 1121.949350][T21762] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1121.958006][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.968045][T21762] Call Trace: [ 1121.971435][T21762] dump_stack+0x21c/0x280 [ 1121.975771][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1121.981505][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1121.986693][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1121.992234][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1121.998296][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1122.003487][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1122.009287][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1122.015344][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1122.020535][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1122.026071][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1122.032128][T21762] ? _copy_from_user+0x201/0x310 [ 1122.037057][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1122.042246][T21762] __msan_chain_origin+0x50/0x90 [ 1122.047177][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.052294][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.057231][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.061736][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1122.066923][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1122.072807][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1122.077990][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1122.083620][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1122.088896][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1122.093657][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1122.098933][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.103625][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.109689][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.115839][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.121038][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.125883][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.130384][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.136711][T21762] RIP: 0023:0xf7ff3549 [ 1122.140758][T21762] Code: Bad RIP value. [ 1122.144813][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1122.153226][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1122.161184][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1122.169146][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1122.177109][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1122.185070][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.193057][T21762] Uninit was stored to memory at: [ 1122.198093][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.203809][T21762] __msan_chain_origin+0x50/0x90 [ 1122.208743][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.213862][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.218801][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.223294][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.227962][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.234018][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.240161][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.245365][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.250217][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.254711][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.261034][T21762] [ 1122.263348][T21762] Uninit was stored to memory at: [ 1122.268387][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.274183][T21762] __msan_chain_origin+0x50/0x90 [ 1122.279120][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.284221][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.289148][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.293633][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.298296][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.304369][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.310528][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.315713][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.320550][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.325041][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.331344][T21762] [ 1122.333663][T21762] Uninit was stored to memory at: [ 1122.338675][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.344380][T21762] __msan_chain_origin+0x50/0x90 [ 1122.349319][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.354436][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.359356][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.363847][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.368512][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.374567][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.380707][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.385892][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.390730][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.395220][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.401541][T21762] [ 1122.403865][T21762] Uninit was stored to memory at: [ 1122.408902][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.414623][T21762] __msan_chain_origin+0x50/0x90 [ 1122.419558][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.424657][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.429583][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.434072][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.438735][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.444788][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.450928][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.456113][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.460956][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.465446][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.471747][T21762] [ 1122.474061][T21762] Uninit was stored to memory at: [ 1122.479068][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.484781][T21762] __msan_chain_origin+0x50/0x90 [ 1122.489704][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.494798][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.499722][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.504215][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.508878][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.514931][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.521075][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.526259][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.531095][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.535585][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.541891][T21762] [ 1122.544199][T21762] Uninit was stored to memory at: [ 1122.549209][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.554912][T21762] __msan_chain_origin+0x50/0x90 [ 1122.559839][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.564934][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.569856][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.574344][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.579012][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.585066][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.591204][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.596390][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.601228][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.605716][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.612017][T21762] [ 1122.614324][T21762] Uninit was stored to memory at: [ 1122.619341][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1122.625136][T21762] __msan_chain_origin+0x50/0x90 [ 1122.630058][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1122.635239][T21762] get_compat_msghdr+0x108/0x2b0 [ 1122.640159][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1122.644649][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1122.649323][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1122.655391][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1122.661530][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1122.666713][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1122.671549][T21762] do_SYSENTER_32+0x73/0x90 [ 1122.676065][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1122.682368][T21762] [ 1122.684678][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1122.691335][T21762] do_recvmmsg+0xbf/0x22c0 [ 1122.695731][T21762] do_recvmmsg+0xbf/0x22c0 [ 1122.992085][T21761] not chained 320000 origins [ 1122.996810][T21761] CPU: 1 PID: 21761 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1123.005475][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.015524][T21761] Call Trace: [ 1123.018851][T21761] dump_stack+0x21c/0x280 [ 1123.023190][T21761] kmsan_internal_chain_origin+0x6f/0x130 [ 1123.028925][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.034131][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1123.039688][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1123.045762][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.050964][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1123.056771][T21761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1123.062842][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.068071][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1123.073626][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1123.079702][T21761] ? _copy_from_user+0x201/0x310 [ 1123.084647][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.089850][T21761] __msan_chain_origin+0x50/0x90 [ 1123.094800][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.099930][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.104879][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.109389][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1123.115201][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.120408][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.125612][T21761] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1123.131515][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1123.136723][T21761] ? kmsan_internal_set_origin+0x75/0xb0 [ 1123.142368][T21761] ? __msan_poison_alloca+0xf0/0x120 [ 1123.147658][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1123.152424][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1123.157201][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.161895][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.167979][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.174147][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.179373][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.184238][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.188750][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.195072][T21761] RIP: 0023:0xf7ff3549 [ 1123.199133][T21761] Code: Bad RIP value. [ 1123.203194][T21761] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1123.211608][T21761] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1123.219581][T21761] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1123.227566][T21761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1123.235545][T21761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1123.243528][T21761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1123.251514][T21761] Uninit was stored to memory at: [ 1123.256564][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.262458][T21761] __msan_chain_origin+0x50/0x90 [ 1123.267397][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.272508][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.277452][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.281954][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.286638][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.292711][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.298863][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.304067][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.308920][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.313421][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.319731][T21761] [ 1123.322054][T21761] Uninit was stored to memory at: [ 1123.327090][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.332926][T21761] __msan_chain_origin+0x50/0x90 [ 1123.337881][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.342995][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.348063][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.352574][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.357254][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.363322][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.369482][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.374684][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.379537][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.384046][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.390795][T21761] [ 1123.393118][T21761] Uninit was stored to memory at: [ 1123.398148][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.403872][T21761] __msan_chain_origin+0x50/0x90 [ 1123.408818][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.413939][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.418883][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.423390][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.428158][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.434231][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.440392][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.445592][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.450452][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.454959][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.461274][T21761] [ 1123.463596][T21761] Uninit was stored to memory at: [ 1123.468648][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.474381][T21761] __msan_chain_origin+0x50/0x90 [ 1123.479329][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.484498][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.489448][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.493953][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.498633][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.504706][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.510864][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.516146][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.520992][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.525498][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.531814][T21761] [ 1123.534132][T21761] Uninit was stored to memory at: [ 1123.539170][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.544892][T21761] __msan_chain_origin+0x50/0x90 [ 1123.549834][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.554950][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.559923][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.564461][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.569140][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.575209][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.581364][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.586569][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.591420][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.595928][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.602240][T21761] [ 1123.604561][T21761] Uninit was stored to memory at: [ 1123.609591][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.615310][T21761] __msan_chain_origin+0x50/0x90 [ 1123.620247][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.625356][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.630294][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.634882][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.639571][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.645637][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.651796][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.656995][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.661864][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.666368][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.672678][T21761] [ 1123.674997][T21761] Uninit was stored to memory at: [ 1123.680027][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1123.685758][T21761] __msan_chain_origin+0x50/0x90 [ 1123.690697][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1123.695805][T21761] get_compat_msghdr+0x108/0x2b0 [ 1123.700829][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1123.705326][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1123.710107][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1123.716178][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1123.722334][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1123.727618][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1123.732472][T21761] do_SYSENTER_32+0x73/0x90 [ 1123.736979][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1123.743287][T21761] [ 1123.745623][T21761] Local variable ----msg_sys@do_recvmmsg created at: [ 1123.752420][T21761] do_recvmmsg+0xbf/0x22c0 [ 1123.756829][T21761] do_recvmmsg+0xbf/0x22c0 [ 1124.104488][T21761] not chained 330000 origins [ 1124.109128][T21761] CPU: 1 PID: 21761 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1124.117791][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.127860][T21761] Call Trace: [ 1124.131160][T21761] dump_stack+0x21c/0x280 [ 1124.135504][T21761] kmsan_internal_chain_origin+0x6f/0x130 [ 1124.141247][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.146452][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1124.152008][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1124.158081][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.163284][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1124.169093][T21761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1124.175161][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.180364][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1124.185931][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1124.192003][T21761] ? _copy_from_user+0x201/0x310 [ 1124.196970][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.202265][T21761] __msan_chain_origin+0x50/0x90 [ 1124.207223][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.212352][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.217301][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.221898][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1124.227731][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.233026][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.238234][T21761] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1124.244142][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1124.249352][T21761] ? kmsan_internal_set_origin+0x75/0xb0 [ 1124.254999][T21761] ? __msan_poison_alloca+0xf0/0x120 [ 1124.260294][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1124.265059][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1124.269829][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.274529][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.280610][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.286768][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.291984][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.296840][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.301350][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.307758][T21761] RIP: 0023:0xf7ff3549 [ 1124.311817][T21761] Code: Bad RIP value. [ 1124.315881][T21761] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1124.324292][T21761] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1124.332259][T21761] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1124.340236][T21761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.348208][T21761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1124.356184][T21761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.364165][T21761] Uninit was stored to memory at: [ 1124.369231][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.374956][T21761] __msan_chain_origin+0x50/0x90 [ 1124.379908][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.385043][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.389987][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.394491][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.399178][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.405258][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.411423][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.416630][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.421488][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.426007][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.432320][T21761] [ 1124.434640][T21761] Uninit was stored to memory at: [ 1124.439675][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.445399][T21761] __msan_chain_origin+0x50/0x90 [ 1124.450340][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.455451][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.460389][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.464895][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.469577][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.475641][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.481798][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.487004][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.491853][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.496358][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.502671][T21761] [ 1124.504994][T21761] Uninit was stored to memory at: [ 1124.510026][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.515739][T21761] __msan_chain_origin+0x50/0x90 [ 1124.520679][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.525797][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.530742][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.535254][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.539932][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.546011][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.552165][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.557362][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.562216][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.566717][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.573038][T21761] [ 1124.575358][T21761] Uninit was stored to memory at: [ 1124.580390][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.586111][T21761] __msan_chain_origin+0x50/0x90 [ 1124.591052][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.596167][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.601104][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.605604][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.610287][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.616357][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.622507][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.627707][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.632560][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.637085][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.643395][T21761] [ 1124.645716][T21761] Uninit was stored to memory at: [ 1124.650746][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.656580][T21761] __msan_chain_origin+0x50/0x90 [ 1124.661518][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.662116][T21762] not chained 340000 origins [ 1124.666716][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.671300][T21762] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1124.676210][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.684846][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.689329][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.699349][T21762] Call Trace: [ 1124.704010][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.707271][T21762] dump_stack+0x21c/0x280 [ 1124.713305][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.717608][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1124.723734][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.729421][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.734589][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.739755][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1124.744578][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.750096][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1124.754581][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.760621][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.766911][T21761] [ 1124.772091][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1124.774386][T21761] Uninit was stored to memory at: [ 1124.780190][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1124.785199][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.791408][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.797099][T21761] __msan_chain_origin+0x50/0x90 [ 1124.802267][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1124.807177][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.812693][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1124.817775][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.823813][T21762] ? _copy_from_user+0x201/0x310 [ 1124.828826][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.833747][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.838215][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.843379][T21762] __msan_chain_origin+0x50/0x90 [ 1124.848030][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.853121][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1124.859160][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.864252][T21762] get_compat_msghdr+0x108/0x2b0 [ 1124.870373][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1124.875500][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1124.880671][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1124.885156][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.889967][T21761] do_SYSENTER_32+0x73/0x90 [ 1124.895138][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1124.899615][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1124.905580][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1124.911865][T21761] [ 1124.917047][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1124.919341][T21761] Uninit was stored to memory at: [ 1124.924969][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1124.929964][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1124.935221][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1124.940910][T21761] __msan_chain_origin+0x50/0x90 [ 1124.945646][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1124.950567][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1124.955302][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1124.960385][T21761] get_compat_msghdr+0x108/0x2b0 [ 1124.965044][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.969960][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1124.976005][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1124.980476][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1124.986609][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1124.991261][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1124.996439][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.002472][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.007297][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.013508][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1125.017989][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.023158][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1125.029455][T21762] RIP: 0023:0xf7ff3549 [ 1125.034279][T21761] do_SYSENTER_32+0x73/0x90 [ 1125.038311][T21762] Code: Bad RIP value. [ 1125.042814][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.046848][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1125.053141][T21761] [ 1125.061528][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1125.063828][T21761] Local variable ----msg_sys@do_recvmmsg created at: [ 1125.071787][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1125.078436][T21761] do_recvmmsg+0xbf/0x22c0 [ 1125.086384][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1125.090784][T21761] do_recvmmsg+0xbf/0x22c0 [ 1125.098738][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1125.111080][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1125.119056][T21762] Uninit was stored to memory at: [ 1125.124085][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.129803][T21762] __msan_chain_origin+0x50/0x90 [ 1125.134744][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.139859][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.144880][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.149383][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.154062][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.160133][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.166293][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.171491][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.176341][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.180851][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.187163][T21762] [ 1125.189482][T21762] Uninit was stored to memory at: [ 1125.194521][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.200261][T21762] __msan_chain_origin+0x50/0x90 [ 1125.205202][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.210314][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.215252][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.219758][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.224466][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.230534][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.236772][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.241973][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.246817][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.251318][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.257627][T21762] [ 1125.259967][T21762] Uninit was stored to memory at: [ 1125.264990][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.270714][T21762] __msan_chain_origin+0x50/0x90 [ 1125.275663][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.280774][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.285708][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.290205][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.294997][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.301204][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.307438][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.312635][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.317485][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.321988][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.328307][T21762] [ 1125.330622][T21762] Uninit was stored to memory at: [ 1125.335641][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.341357][T21762] __msan_chain_origin+0x50/0x90 [ 1125.346293][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.351404][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.356340][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.360842][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.365523][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.371615][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.377797][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.382993][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.387845][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.392362][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.398691][T21762] [ 1125.401017][T21762] Uninit was stored to memory at: [ 1125.406044][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.411772][T21762] __msan_chain_origin+0x50/0x90 [ 1125.416718][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.421835][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.426775][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.431281][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.435976][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.442049][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.448204][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.453403][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.458257][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.462763][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.469074][T21762] [ 1125.471394][T21762] Uninit was stored to memory at: [ 1125.476420][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.482142][T21762] __msan_chain_origin+0x50/0x90 [ 1125.487082][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.492192][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.497127][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.501633][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.506336][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.512405][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.518565][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.523764][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.528619][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.533121][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.539535][T21762] [ 1125.541854][T21762] Uninit was stored to memory at: [ 1125.546887][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1125.552603][T21762] __msan_chain_origin+0x50/0x90 [ 1125.557544][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.562656][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.567587][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.572094][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1125.576773][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1125.582842][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1125.589010][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1125.594207][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1125.599055][T21762] do_SYSENTER_32+0x73/0x90 [ 1125.603551][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1125.609855][T21762] [ 1125.612170][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1125.618832][T21762] do_recvmmsg+0xbf/0x22c0 [ 1125.623243][T21762] do_recvmmsg+0xbf/0x22c0 [ 1125.857918][T21762] not chained 350000 origins [ 1125.862548][T21762] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1125.871227][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.881384][T21762] Call Trace: [ 1125.884682][T21762] dump_stack+0x21c/0x280 [ 1125.889021][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1125.894740][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.899942][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1125.905491][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1125.911560][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.916762][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1125.922566][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1125.928634][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.933830][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1125.939401][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1125.945475][T21762] ? _copy_from_user+0x201/0x310 [ 1125.950417][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.955616][T21762] __msan_chain_origin+0x50/0x90 [ 1125.960566][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1125.965701][T21762] get_compat_msghdr+0x108/0x2b0 [ 1125.970651][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1125.975179][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.980385][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1125.986290][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1125.991503][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1125.997136][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1126.002458][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1126.007242][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1126.012016][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.016714][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.022799][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.028956][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.034167][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.039022][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.043526][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.049853][T21762] RIP: 0023:0xf7ff3549 [ 1126.053907][T21762] Code: Bad RIP value. [ 1126.057960][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1126.066368][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1126.074341][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1126.082319][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1126.090294][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1126.098268][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1126.106257][T21762] Uninit was stored to memory at: [ 1126.111289][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.117007][T21762] __msan_chain_origin+0x50/0x90 [ 1126.121948][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.127056][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.131992][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.136502][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.141182][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.147249][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.153401][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.158602][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.163567][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.168075][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.174386][T21762] [ 1126.176705][T21762] Uninit was stored to memory at: [ 1126.181734][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.187456][T21762] __msan_chain_origin+0x50/0x90 [ 1126.192485][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.197595][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.202531][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.207051][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.211727][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.217795][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.223987][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.229195][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.234052][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.238561][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.244873][T21762] [ 1126.247194][T21762] Uninit was stored to memory at: [ 1126.252231][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.257954][T21762] __msan_chain_origin+0x50/0x90 [ 1126.262899][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.268013][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.272951][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.277456][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.282135][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.288208][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.294366][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.299569][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.304422][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.308930][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.315243][T21762] [ 1126.317564][T21762] Uninit was stored to memory at: [ 1126.322595][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.328318][T21762] __msan_chain_origin+0x50/0x90 [ 1126.333524][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.338640][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.343587][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.348096][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.352777][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.358852][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.365016][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.370223][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.375083][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.379591][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.385910][T21762] [ 1126.388235][T21762] Uninit was stored to memory at: [ 1126.393278][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.399000][T21762] __msan_chain_origin+0x50/0x90 [ 1126.403950][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.409074][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.414016][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.418521][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.423204][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.429279][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.435434][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.440642][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.445498][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.450004][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.456333][T21762] [ 1126.458662][T21762] Uninit was stored to memory at: [ 1126.463693][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.469420][T21762] __msan_chain_origin+0x50/0x90 [ 1126.474367][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.479495][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.484449][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.488952][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.493627][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.499694][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.505886][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.511092][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.516035][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.520538][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.526850][T21762] [ 1126.529171][T21762] Uninit was stored to memory at: [ 1126.534232][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1126.539959][T21762] __msan_chain_origin+0x50/0x90 [ 1126.544899][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1126.550015][T21762] get_compat_msghdr+0x108/0x2b0 [ 1126.554952][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1126.559454][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1126.564132][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1126.570201][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1126.576354][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1126.581569][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1126.586443][T21762] do_SYSENTER_32+0x73/0x90 [ 1126.590951][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1126.597262][T21762] [ 1126.599583][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1126.606256][T21762] do_recvmmsg+0xbf/0x22c0 [ 1126.610673][T21762] do_recvmmsg+0xbf/0x22c0 [ 1127.535681][T21762] not chained 360000 origins [ 1127.540321][T21762] CPU: 1 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1127.548992][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.559046][T21762] Call Trace: [ 1127.562347][T21762] dump_stack+0x21c/0x280 [ 1127.566692][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1127.572427][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.577631][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1127.583186][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1127.589260][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.594490][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1127.600304][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1127.606373][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.611576][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1127.617124][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1127.623203][T21762] ? _copy_from_user+0x201/0x310 [ 1127.628146][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.633345][T21762] __msan_chain_origin+0x50/0x90 [ 1127.638284][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1127.643409][T21762] get_compat_msghdr+0x108/0x2b0 [ 1127.648361][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1127.652880][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.658089][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1127.663992][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1127.669197][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1127.674838][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1127.680130][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1127.684893][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1127.689665][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1127.694362][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.700461][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.706618][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1127.711936][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1127.716793][T21762] do_SYSENTER_32+0x73/0x90 [ 1127.721410][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.727726][T21762] RIP: 0023:0xf7ff3549 [ 1127.731771][T21762] Code: Bad RIP value. [ 1127.735819][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1127.744219][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1127.752175][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1127.760252][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1127.768209][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1127.776165][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.784127][T21762] Uninit was stored to memory at: [ 1127.789138][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1127.794841][T21762] __msan_chain_origin+0x50/0x90 [ 1127.799782][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1127.804878][T21762] get_compat_msghdr+0x108/0x2b0 [ 1127.809808][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1127.814289][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1127.818950][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.825000][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.831141][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1127.836325][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1127.841251][T21762] do_SYSENTER_32+0x73/0x90 [ 1127.845740][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.852043][T21762] [ 1127.854359][T21762] Uninit was stored to memory at: [ 1127.859482][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1127.865186][T21762] __msan_chain_origin+0x50/0x90 [ 1127.870112][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1127.875208][T21762] get_compat_msghdr+0x108/0x2b0 [ 1127.880131][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1127.884620][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1127.889283][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.895441][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.901582][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1127.906769][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1127.911603][T21762] do_SYSENTER_32+0x73/0x90 [ 1127.916092][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.922397][T21762] [ 1127.924709][T21762] Uninit was stored to memory at: [ 1127.929723][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1127.935427][T21762] __msan_chain_origin+0x50/0x90 [ 1127.940350][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1127.945449][T21762] get_compat_msghdr+0x108/0x2b0 [ 1127.950373][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1127.954858][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1127.959524][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1127.965663][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1127.971804][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1127.976986][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1127.981835][T21762] do_SYSENTER_32+0x73/0x90 [ 1127.986323][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1127.992629][T21762] [ 1127.994935][T21762] Uninit was stored to memory at: [ 1127.999946][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1128.005648][T21762] __msan_chain_origin+0x50/0x90 [ 1128.010571][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1128.015671][T21762] get_compat_msghdr+0x108/0x2b0 [ 1128.020598][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1128.025086][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1128.029763][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.035815][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.041954][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1128.047138][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1128.051970][T21762] do_SYSENTER_32+0x73/0x90 [ 1128.056455][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.062756][T21762] [ 1128.065068][T21762] Uninit was stored to memory at: [ 1128.070080][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1128.075784][T21762] __msan_chain_origin+0x50/0x90 [ 1128.080709][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1128.085805][T21762] get_compat_msghdr+0x108/0x2b0 [ 1128.090722][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1128.095206][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1128.099869][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.105919][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.112074][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1128.117345][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1128.122182][T21762] do_SYSENTER_32+0x73/0x90 [ 1128.126762][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.133065][T21762] [ 1128.135373][T21762] Uninit was stored to memory at: [ 1128.140384][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1128.146102][T21762] __msan_chain_origin+0x50/0x90 [ 1128.151041][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1128.156141][T21762] get_compat_msghdr+0x108/0x2b0 [ 1128.161063][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1128.165552][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1128.170216][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.176270][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.182409][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1128.187591][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1128.192422][T21762] do_SYSENTER_32+0x73/0x90 [ 1128.196913][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.203214][T21762] [ 1128.205522][T21762] Uninit was stored to memory at: [ 1128.210530][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1128.216232][T21762] __msan_chain_origin+0x50/0x90 [ 1128.221154][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1128.226252][T21762] get_compat_msghdr+0x108/0x2b0 [ 1128.231182][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1128.235686][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1128.240362][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1128.246436][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1128.252608][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1128.257799][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1128.262640][T21762] do_SYSENTER_32+0x73/0x90 [ 1128.267139][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1128.273454][T21762] [ 1128.275762][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1128.282425][T21762] do_recvmmsg+0xbf/0x22c0 15:38:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000200)) 15:38:15 executing program 3: openat$audio(0xffffffffffffff9c, 0x0, 0x8770b7705204be08, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0xf866, 0x80000}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'vlan0\x00', {}, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x481}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0xff, 0x2}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 15:38:15 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, '\x00', "d3b2ccc2d70ccf2acede253b8ca65b33", '\x00', "9676e64fbcbdb666"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 15:38:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = epoll_create1(0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) dup(r1) eventfd2(0x0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 15:38:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) [ 1128.286825][T21762] do_recvmmsg+0xbf/0x22c0 [ 1128.546399][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:38:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x8, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) pipe2(0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 15:38:16 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x1d7) ftruncate(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 15:38:17 executing program 5: setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x2000000) 15:38:17 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) 15:38:17 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x500, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) dup3(r0, r1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, 0x400}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) [ 1129.685007][T21761] not chained 370000 origins [ 1129.689759][T21761] CPU: 1 PID: 21761 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1129.698423][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.708459][T21761] Call Trace: [ 1129.711737][T21761] dump_stack+0x21c/0x280 [ 1129.716063][T21761] kmsan_internal_chain_origin+0x6f/0x130 [ 1129.721862][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.727051][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1129.732585][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1129.738641][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.743855][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1129.749653][T21761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1129.755710][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.760904][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1129.766531][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1129.772599][T21761] ? _copy_from_user+0x201/0x310 [ 1129.777638][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.782829][T21761] __msan_chain_origin+0x50/0x90 [ 1129.787766][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1129.792877][T21761] get_compat_msghdr+0x108/0x2b0 [ 1129.797811][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1129.802306][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1129.808104][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.813297][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.818481][T21761] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1129.824375][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1129.829565][T21761] ? kmsan_internal_set_origin+0x75/0xb0 [ 1129.835186][T21761] ? __msan_poison_alloca+0xf0/0x120 [ 1129.840462][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1129.845213][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1129.849967][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1129.854647][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.860712][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.866870][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1129.872075][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1129.876921][T21761] do_SYSENTER_32+0x73/0x90 [ 1129.881416][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1129.887732][T21761] RIP: 0023:0xf7ff3549 [ 1129.891781][T21761] Code: Bad RIP value. [ 1129.896179][T21761] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1129.904581][T21761] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1129.912547][T21761] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1129.920503][T21761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1129.928464][T21761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1129.936423][T21761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1129.944390][T21761] Uninit was stored to memory at: [ 1129.949408][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1129.955113][T21761] __msan_chain_origin+0x50/0x90 [ 1129.960037][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1129.965135][T21761] get_compat_msghdr+0x108/0x2b0 [ 1129.970077][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1129.974566][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1129.979232][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1129.985298][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1129.991438][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1129.996623][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.001457][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.005951][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.012254][T21761] [ 1130.014566][T21761] Uninit was stored to memory at: [ 1130.019751][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.025456][T21761] __msan_chain_origin+0x50/0x90 [ 1130.030391][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.035484][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.040666][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.045155][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.049820][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.055875][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.062015][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.067214][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.072050][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.076540][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.082839][T21761] [ 1130.085147][T21761] Uninit was stored to memory at: [ 1130.090156][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.095858][T21761] __msan_chain_origin+0x50/0x90 [ 1130.100779][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.105872][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.110794][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.115284][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.119951][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.126004][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.132139][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.137331][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.142164][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.146652][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.152949][T21761] [ 1130.155264][T21761] Uninit was stored to memory at: [ 1130.160274][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.165991][T21761] __msan_chain_origin+0x50/0x90 [ 1130.170913][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.176027][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.180960][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.185457][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.190134][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.196196][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.202339][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.207563][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.212399][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.216893][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.223459][T21761] [ 1130.225776][T21761] Uninit was stored to memory at: [ 1130.230790][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.236518][T21761] __msan_chain_origin+0x50/0x90 [ 1130.241457][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.246646][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.251582][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.256085][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.260751][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.266818][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.272962][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.278245][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.283092][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.287586][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.293888][T21761] [ 1130.296197][T21761] Uninit was stored to memory at: [ 1130.301212][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.306917][T21761] __msan_chain_origin+0x50/0x90 [ 1130.311843][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.316939][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.321860][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.326351][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.331019][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.337084][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.343241][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.348438][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.353378][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.357874][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.364180][T21761] [ 1130.366497][T21761] Uninit was stored to memory at: [ 1130.371725][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1130.377448][T21761] __msan_chain_origin+0x50/0x90 [ 1130.382408][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1130.387517][T21761] get_compat_msghdr+0x108/0x2b0 [ 1130.392452][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1130.396943][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1130.401609][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1130.407662][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1130.413822][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1130.419306][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1130.424147][T21761] do_SYSENTER_32+0x73/0x90 [ 1130.428643][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1130.434948][T21761] [ 1130.437270][T21761] Local variable ----msg_sys@do_recvmmsg created at: [ 1130.444018][T21761] do_recvmmsg+0xbf/0x22c0 [ 1130.448427][T21761] do_recvmmsg+0xbf/0x22c0 [ 1130.689286][ T29] audit: type=1400 audit(1599406698.646:54): avc: denied { ioctl } for pid=21815 comm="syz-executor.4" path="socket:[79416]" dev="sockfs" ino=79416 ioctlcmd=0xf509 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 1131.734710][T21761] not chained 380000 origins [ 1131.739342][T21761] CPU: 1 PID: 21761 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1131.748009][T21761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1131.758061][T21761] Call Trace: [ 1131.761346][T21761] dump_stack+0x21c/0x280 [ 1131.765826][T21761] kmsan_internal_chain_origin+0x6f/0x130 [ 1131.771662][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.776851][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1131.782515][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1131.788573][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.793762][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.799557][T21761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1131.805611][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.810797][T21761] ? kmsan_set_origin_checked+0x95/0xf0 [ 1131.816335][T21761] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1131.822393][T21761] ? _copy_from_user+0x201/0x310 [ 1131.827320][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.832518][T21761] __msan_chain_origin+0x50/0x90 [ 1131.837552][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1131.842664][T21761] get_compat_msghdr+0x108/0x2b0 [ 1131.847867][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1131.852466][T21761] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1131.858262][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.863444][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.868633][T21761] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1131.874519][T21761] ? kmsan_get_metadata+0x116/0x180 [ 1131.879706][T21761] ? kmsan_internal_set_origin+0x75/0xb0 [ 1131.885545][T21761] ? __msan_poison_alloca+0xf0/0x120 [ 1131.890818][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1131.895572][T21761] ? __sys_recvmmsg+0xbb/0x610 [ 1131.900336][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1131.905015][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1131.911076][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1131.917233][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1131.922443][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1131.927283][T21761] do_SYSENTER_32+0x73/0x90 [ 1131.931786][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1131.938095][T21761] RIP: 0023:0xf7ff3549 [ 1131.942141][T21761] Code: Bad RIP value. [ 1131.946194][T21761] RSP: 002b:00000000f55cc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1131.954598][T21761] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1131.962570][T21761] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1131.970528][T21761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1131.978484][T21761] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1131.986440][T21761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1131.994406][T21761] Uninit was stored to memory at: [ 1131.999421][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.005130][T21761] __msan_chain_origin+0x50/0x90 [ 1132.010057][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.015154][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.020078][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.024565][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.029233][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.035288][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.041428][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.046613][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.051448][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.055938][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.062271][T21761] [ 1132.064583][T21761] Uninit was stored to memory at: [ 1132.069594][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.075316][T21761] __msan_chain_origin+0x50/0x90 [ 1132.080243][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.085345][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.090270][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.094758][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.099438][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.105518][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.111668][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.116856][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.121694][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.126201][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.132504][T21761] [ 1132.134811][T21761] Uninit was stored to memory at: [ 1132.140261][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.145967][T21761] __msan_chain_origin+0x50/0x90 [ 1132.150909][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.156006][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.160926][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.165417][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.170083][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.176135][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.182279][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.187463][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.192299][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.196791][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.203107][T21761] [ 1132.205415][T21761] Uninit was stored to memory at: [ 1132.210426][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.216132][T21761] __msan_chain_origin+0x50/0x90 [ 1132.221058][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.226157][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.231086][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.235574][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.240240][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.246294][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.252448][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.257660][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.262508][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.267002][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.273311][T21761] [ 1132.275635][T21761] Uninit was stored to memory at: [ 1132.280658][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.286364][T21761] __msan_chain_origin+0x50/0x90 [ 1132.291376][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.296474][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.301399][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.305886][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.310553][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.316695][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.322840][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.328025][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.332864][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.337355][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.343668][T21761] [ 1132.345976][T21761] Uninit was stored to memory at: [ 1132.351011][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.356716][T21761] __msan_chain_origin+0x50/0x90 [ 1132.361644][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.366744][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.371669][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.376163][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.380834][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.386887][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.393123][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.398319][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.403261][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.407780][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.414169][T21761] [ 1132.416488][T21761] Uninit was stored to memory at: [ 1132.421550][T21761] kmsan_internal_chain_origin+0xad/0x130 [ 1132.427261][T21761] __msan_chain_origin+0x50/0x90 [ 1132.432197][T21761] __get_compat_msghdr+0x6db/0x9d0 [ 1132.437298][T21761] get_compat_msghdr+0x108/0x2b0 [ 1132.442224][T21761] do_recvmmsg+0xdbb/0x22c0 [ 1132.446713][T21761] __sys_recvmmsg+0x5dd/0x610 [ 1132.451383][T21761] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.457439][T21761] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.463582][T21761] __do_fast_syscall_32+0x2af/0x480 [ 1132.468770][T21761] do_fast_syscall_32+0x6b/0xd0 [ 1132.473607][T21761] do_SYSENTER_32+0x73/0x90 [ 1132.478098][T21761] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.484461][T21761] [ 1132.486775][T21761] Local variable ----msg_sys@do_recvmmsg created at: [ 1132.493429][T21761] do_recvmmsg+0xbf/0x22c0 [ 1132.497826][T21761] do_recvmmsg+0xbf/0x22c0 [ 1132.781312][T21762] not chained 390000 origins [ 1132.786152][T21762] CPU: 1 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1132.794816][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1132.804864][T21762] Call Trace: [ 1132.808162][T21762] dump_stack+0x21c/0x280 [ 1132.812502][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1132.818224][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.823422][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1132.828972][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1132.835044][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.840245][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1132.846051][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1132.852114][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.857316][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1132.862867][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1132.868939][T21762] ? _copy_from_user+0x201/0x310 [ 1132.873876][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.879079][T21762] __msan_chain_origin+0x50/0x90 [ 1132.884019][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1132.889145][T21762] get_compat_msghdr+0x108/0x2b0 [ 1132.894119][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1132.898640][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.903843][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1132.909743][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1132.914944][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1132.920581][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1132.925867][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1132.930628][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1132.935395][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1132.940089][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1132.946167][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1132.952334][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1132.957544][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1132.962396][T21762] do_SYSENTER_32+0x73/0x90 [ 1132.966902][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1132.973224][T21762] RIP: 0023:0xf7ff3549 [ 1132.977283][T21762] Code: Bad RIP value. [ 1132.981340][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1132.989747][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1132.997725][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1133.005694][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1133.013667][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1133.021636][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.029608][T21762] Uninit was stored to memory at: [ 1133.034632][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.040348][T21762] __msan_chain_origin+0x50/0x90 [ 1133.045301][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.050419][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.055345][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.059845][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.064519][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.070580][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.076729][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.081927][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.086771][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.091281][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.097580][T21762] [ 1133.099890][T21762] Uninit was stored to memory at: [ 1133.104913][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.110621][T21762] __msan_chain_origin+0x50/0x90 [ 1133.115544][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.120655][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.125577][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.130069][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.134733][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.140789][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.146931][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.152129][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.156966][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.161456][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.167762][T21762] [ 1133.170074][T21762] Uninit was stored to memory at: [ 1133.175098][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.180812][T21762] __msan_chain_origin+0x50/0x90 [ 1133.185737][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.190839][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.195770][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.200276][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.204948][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.211006][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.217150][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.222454][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.227406][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.231920][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.238225][T21762] [ 1133.240552][T21762] Uninit was stored to memory at: [ 1133.245570][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.251281][T21762] __msan_chain_origin+0x50/0x90 [ 1133.256213][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.261352][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.266276][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.270783][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.275447][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.281498][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.287637][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.292837][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.297685][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.302175][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.308475][T21762] [ 1133.310784][T21762] Uninit was stored to memory at: [ 1133.315790][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.321494][T21762] __msan_chain_origin+0x50/0x90 [ 1133.326419][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.331514][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.336434][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.340935][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.345612][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.351663][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.357801][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.363072][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.367909][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.372399][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.378703][T21762] [ 1133.381106][T21762] Uninit was stored to memory at: [ 1133.386131][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.391842][T21762] __msan_chain_origin+0x50/0x90 [ 1133.396776][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.401878][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.406904][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.411396][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.416065][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.422127][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.428275][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.433469][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.438311][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.442927][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.449232][T21762] [ 1133.451540][T21762] Uninit was stored to memory at: [ 1133.456550][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.462256][T21762] __msan_chain_origin+0x50/0x90 [ 1133.467180][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.472275][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.477197][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.481681][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.486343][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.492394][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.498532][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.503729][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.508564][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.513056][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.519358][T21762] [ 1133.521666][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1133.528326][T21762] do_recvmmsg+0xbf/0x22c0 [ 1133.532728][T21762] do_recvmmsg+0xbf/0x22c0 [ 1133.690259][T21762] not chained 400000 origins [ 1133.694899][T21762] CPU: 1 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1133.703564][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.713612][T21762] Call Trace: [ 1133.716906][T21762] dump_stack+0x21c/0x280 [ 1133.721242][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1133.726969][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.732171][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1133.737717][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1133.743796][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.748997][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1133.754805][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1133.760871][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.766070][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1133.771619][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1133.777692][T21762] ? _copy_from_user+0x201/0x310 [ 1133.782633][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.787837][T21762] __msan_chain_origin+0x50/0x90 [ 1133.792779][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.797907][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.802852][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.807370][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.812570][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1133.818549][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1133.823872][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1133.829508][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1133.834790][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1133.839550][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1133.844314][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.849005][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.855081][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.861233][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.866443][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.871316][T21762] do_SYSENTER_32+0x73/0x90 [ 1133.875813][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1133.882123][T21762] RIP: 0023:0xf7ff3549 [ 1133.886255][T21762] Code: Bad RIP value. [ 1133.890307][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1133.898705][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1133.906680][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1133.914648][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1133.922617][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1133.930573][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.938710][T21762] Uninit was stored to memory at: [ 1133.943731][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1133.949449][T21762] __msan_chain_origin+0x50/0x90 [ 1133.954386][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1133.959501][T21762] get_compat_msghdr+0x108/0x2b0 [ 1133.964444][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1133.968936][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1133.973600][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1133.979653][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1133.985794][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1133.990977][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1133.995812][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.000301][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.006604][T21762] [ 1134.008914][T21762] Uninit was stored to memory at: [ 1134.013926][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.019633][T21762] __msan_chain_origin+0x50/0x90 [ 1134.024556][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.029772][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.034696][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.039189][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.043855][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.049909][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.056049][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.061234][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.066154][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.070642][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.076942][T21762] [ 1134.079274][T21762] Uninit was stored to memory at: [ 1134.084300][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.090024][T21762] __msan_chain_origin+0x50/0x90 [ 1134.094948][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.100042][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.104966][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.109454][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.114116][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.120215][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.126356][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.131538][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.136386][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.140881][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.147196][T21762] [ 1134.149507][T21762] Uninit was stored to memory at: [ 1134.154520][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.160313][T21762] __msan_chain_origin+0x50/0x90 [ 1134.165238][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.170333][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.175358][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.179968][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.184630][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.190683][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.196823][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.202006][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.206842][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.211330][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.217634][T21762] [ 1134.219961][T21762] Uninit was stored to memory at: [ 1134.224972][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.230677][T21762] __msan_chain_origin+0x50/0x90 [ 1134.235615][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.240885][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.245806][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.250294][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.254957][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.261008][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.267143][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.272323][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.277156][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.281658][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.287959][T21762] [ 1134.290269][T21762] Uninit was stored to memory at: [ 1134.295278][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.300984][T21762] __msan_chain_origin+0x50/0x90 [ 1134.305906][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.311016][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.315941][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.320446][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.325109][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.331159][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.337295][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.342481][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.347317][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.351805][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.358107][T21762] [ 1134.360415][T21762] Uninit was stored to memory at: [ 1134.365439][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.371235][T21762] __msan_chain_origin+0x50/0x90 [ 1134.376158][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.381256][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.386180][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.390683][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.395352][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.401415][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.407560][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.412745][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.417582][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.422075][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.428377][T21762] [ 1134.430686][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1134.437344][T21762] do_recvmmsg+0xbf/0x22c0 [ 1134.441833][T21762] do_recvmmsg+0xbf/0x22c0 [ 1134.571255][T21762] not chained 410000 origins [ 1134.575934][T21762] CPU: 1 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1134.584602][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1134.594650][T21762] Call Trace: [ 1134.597949][T21762] dump_stack+0x21c/0x280 [ 1134.602292][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1134.608019][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.613220][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1134.618773][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1134.624846][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.630048][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1134.635856][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1134.641925][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.647156][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1134.652704][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1134.658777][T21762] ? _copy_from_user+0x201/0x310 [ 1134.663722][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.668920][T21762] __msan_chain_origin+0x50/0x90 [ 1134.673856][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.679012][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.683957][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.688479][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.693685][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1134.699590][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1134.704795][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1134.710432][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1134.715847][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1134.720612][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1134.725379][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.730154][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.736226][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.742388][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.747594][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.752449][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.756959][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.763279][T21762] RIP: 0023:0xf7ff3549 [ 1134.767336][T21762] Code: Bad RIP value. [ 1134.771389][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1134.779798][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1134.787768][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1134.795751][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.803721][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1134.811689][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.819768][T21762] Uninit was stored to memory at: [ 1134.824808][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.830525][T21762] __msan_chain_origin+0x50/0x90 [ 1134.835474][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.840680][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.845612][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.850110][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.854874][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.861047][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.867192][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.872377][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.877213][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.881720][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.888021][T21762] [ 1134.890327][T21762] Uninit was stored to memory at: [ 1134.895337][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.901040][T21762] __msan_chain_origin+0x50/0x90 [ 1134.905968][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.911068][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.915989][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.920475][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.925138][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1134.931365][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1134.937501][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1134.942681][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1134.947514][T21762] do_SYSENTER_32+0x73/0x90 [ 1134.952004][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1134.958304][T21762] [ 1134.960613][T21762] Uninit was stored to memory at: [ 1134.965623][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1134.971337][T21762] __msan_chain_origin+0x50/0x90 [ 1134.976265][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1134.981363][T21762] get_compat_msghdr+0x108/0x2b0 [ 1134.986285][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1134.990776][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1134.995439][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.001490][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.007719][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.012899][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.017729][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.022217][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.030343][T21762] [ 1135.032649][T21762] Uninit was stored to memory at: [ 1135.037660][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.043362][T21762] __msan_chain_origin+0x50/0x90 [ 1135.048289][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.053384][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.058306][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.062792][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.067453][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.073600][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.079839][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.085027][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.089861][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.094348][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.100652][T21762] [ 1135.102963][T21762] Uninit was stored to memory at: [ 1135.107973][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.113809][T21762] __msan_chain_origin+0x50/0x90 [ 1135.118735][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.123835][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.128763][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.133261][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.137924][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.143983][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.150124][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.155315][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.160151][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.164641][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.170941][T21762] [ 1135.173251][T21762] Uninit was stored to memory at: [ 1135.178277][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.183982][T21762] __msan_chain_origin+0x50/0x90 [ 1135.188906][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.194015][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.198963][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.203456][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.208125][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.214182][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.220330][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.225519][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.230373][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.234868][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.241174][T21762] [ 1135.243500][T21762] Uninit was stored to memory at: [ 1135.248542][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.254268][T21762] __msan_chain_origin+0x50/0x90 [ 1135.259199][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.264300][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.269225][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.273715][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.278390][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.284464][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.290626][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.295832][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.300672][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.305266][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.311581][T21762] [ 1135.313895][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1135.320548][T21762] do_recvmmsg+0xbf/0x22c0 [ 1135.324950][T21762] do_recvmmsg+0xbf/0x22c0 [ 1135.473085][T21762] not chained 420000 origins [ 1135.477809][T21762] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1135.486472][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.496520][T21762] Call Trace: [ 1135.499810][T21762] dump_stack+0x21c/0x280 [ 1135.504141][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1135.509861][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.515059][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1135.520637][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1135.526711][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.531913][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1135.537716][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1135.543778][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.548979][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1135.554525][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1135.560599][T21762] ? _copy_from_user+0x201/0x310 [ 1135.565545][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.570745][T21762] __msan_chain_origin+0x50/0x90 [ 1135.575686][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.580839][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.585788][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.590309][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.595515][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1135.601415][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1135.606617][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1135.612259][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1135.617653][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1135.622413][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1135.627177][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.631915][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.637991][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.644164][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.649373][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.654229][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.658740][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.665097][T21762] RIP: 0023:0xf7ff3549 [ 1135.669137][T21762] Code: Bad RIP value. [ 1135.673211][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1135.681596][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1135.689592][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1135.697544][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1135.705492][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1135.713523][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1135.721474][T21762] Uninit was stored to memory at: [ 1135.726477][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.732170][T21762] __msan_chain_origin+0x50/0x90 [ 1135.737085][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.742173][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.747083][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.751558][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.756208][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.762246][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.768392][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.773559][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.778382][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.782860][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.789164][T21762] [ 1135.791460][T21762] Uninit was stored to memory at: [ 1135.796457][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.802146][T21762] __msan_chain_origin+0x50/0x90 [ 1135.807068][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.812152][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.817065][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.821554][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.826206][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.832354][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.838480][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.843649][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.848471][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.852948][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.859236][T21762] [ 1135.861552][T21762] Uninit was stored to memory at: [ 1135.866547][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.872237][T21762] __msan_chain_origin+0x50/0x90 [ 1135.877145][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.882234][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.887144][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.891620][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.896268][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.902306][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.908432][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.913624][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.918448][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.922922][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.929212][T21762] [ 1135.931512][T21762] Uninit was stored to memory at: [ 1135.936525][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1135.942226][T21762] __msan_chain_origin+0x50/0x90 [ 1135.947137][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1135.952221][T21762] get_compat_msghdr+0x108/0x2b0 [ 1135.957133][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1135.961610][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1135.966363][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1135.972424][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1135.978551][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1135.983724][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1135.988561][T21762] do_SYSENTER_32+0x73/0x90 [ 1135.993058][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1135.999350][T21762] [ 1136.001647][T21762] Uninit was stored to memory at: [ 1136.006645][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.012350][T21762] __msan_chain_origin+0x50/0x90 [ 1136.017275][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.022359][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.027267][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.031739][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.036402][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.042440][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.048567][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.053738][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.058563][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.063214][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.069508][T21762] [ 1136.071809][T21762] Uninit was stored to memory at: [ 1136.076806][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.082496][T21762] __msan_chain_origin+0x50/0x90 [ 1136.087528][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.092612][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.097520][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.101994][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.106657][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.112705][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.118827][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.124018][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.128844][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.133330][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.139635][T21762] [ 1136.141934][T21762] Uninit was stored to memory at: [ 1136.146933][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.152644][T21762] __msan_chain_origin+0x50/0x90 [ 1136.157556][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.162642][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.167566][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.172047][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.176697][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.182736][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.188863][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.194034][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.198873][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.203349][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.209640][T21762] [ 1136.211940][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1136.218604][T21762] do_recvmmsg+0xbf/0x22c0 [ 1136.223272][T21762] do_recvmmsg+0xbf/0x22c0 [ 1136.405544][T21762] not chained 430000 origins [ 1136.410182][T21762] CPU: 0 PID: 21762 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 1136.418850][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.428901][T21762] Call Trace: [ 1136.432195][T21762] dump_stack+0x21c/0x280 [ 1136.436528][T21762] kmsan_internal_chain_origin+0x6f/0x130 [ 1136.442251][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.447539][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1136.453085][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1136.459146][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.464345][T21762] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1136.470145][T21762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1136.476200][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.481386][T21762] ? kmsan_set_origin_checked+0x95/0xf0 [ 1136.486921][T21762] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1136.492989][T21762] ? _copy_from_user+0x201/0x310 [ 1136.497915][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.503102][T21762] __msan_chain_origin+0x50/0x90 [ 1136.508033][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.513144][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.518076][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.522579][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.527770][T21762] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1136.533654][T21762] ? kmsan_get_metadata+0x116/0x180 [ 1136.538842][T21762] ? kmsan_internal_set_origin+0x75/0xb0 [ 1136.544468][T21762] ? __msan_poison_alloca+0xf0/0x120 [ 1136.549756][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1136.554507][T21762] ? __sys_recvmmsg+0xbb/0x610 [ 1136.559266][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.563943][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.570007][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.576256][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.581451][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.586293][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.590788][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.597121][T21762] RIP: 0023:0xf7ff3549 [ 1136.601254][T21762] Code: Bad RIP value. [ 1136.605404][T21762] RSP: 002b:00000000f55ab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1136.613799][T21762] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1136.621757][T21762] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1136.629715][T21762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.637670][T21762] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.645626][T21762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.653598][T21762] Uninit was stored to memory at: [ 1136.658609][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.664313][T21762] __msan_chain_origin+0x50/0x90 [ 1136.669237][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.674335][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.679274][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.683774][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.688437][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.694492][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.700635][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.705821][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.710654][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.715153][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.721468][T21762] [ 1136.723782][T21762] Uninit was stored to memory at: [ 1136.728793][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.734496][T21762] __msan_chain_origin+0x50/0x90 [ 1136.739424][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.744532][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.749454][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.753951][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.758614][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.764666][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.770805][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.775994][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.780837][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.785324][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.791622][T21762] [ 1136.793930][T21762] Uninit was stored to memory at: [ 1136.799060][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.804873][T21762] __msan_chain_origin+0x50/0x90 [ 1136.809800][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.814897][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.819818][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.824429][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.829092][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.835144][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.841285][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.846472][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.851323][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.855918][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.862219][T21762] [ 1136.864526][T21762] Uninit was stored to memory at: [ 1136.869539][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.875243][T21762] __msan_chain_origin+0x50/0x90 [ 1136.880171][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.885268][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.890189][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.894709][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.899462][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.905521][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.911660][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.916842][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.921675][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.926173][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1136.932472][T21762] [ 1136.934787][T21762] Uninit was stored to memory at: [ 1136.939797][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1136.945507][T21762] __msan_chain_origin+0x50/0x90 [ 1136.950439][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1136.955536][T21762] get_compat_msghdr+0x108/0x2b0 [ 1136.960457][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1136.964975][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1136.969642][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1136.975695][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1136.981838][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1136.987058][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1136.991901][T21762] do_SYSENTER_32+0x73/0x90 [ 1136.996398][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.002718][T21762] [ 1137.005033][T21762] Uninit was stored to memory at: [ 1137.010052][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1137.015761][T21762] __msan_chain_origin+0x50/0x90 [ 1137.020688][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1137.025786][T21762] get_compat_msghdr+0x108/0x2b0 [ 1137.030707][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1137.035199][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1137.039866][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.045934][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.052075][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1137.057257][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1137.062092][T21762] do_SYSENTER_32+0x73/0x90 [ 1137.066584][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.072889][T21762] [ 1137.075193][T21762] Uninit was stored to memory at: [ 1137.080204][T21762] kmsan_internal_chain_origin+0xad/0x130 [ 1137.085906][T21762] __msan_chain_origin+0x50/0x90 [ 1137.090828][T21762] __get_compat_msghdr+0x6db/0x9d0 [ 1137.095935][T21762] get_compat_msghdr+0x108/0x2b0 [ 1137.100856][T21762] do_recvmmsg+0xdbb/0x22c0 [ 1137.105346][T21762] __sys_recvmmsg+0x5dd/0x610 [ 1137.110009][T21762] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1137.116077][T21762] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1137.122225][T21762] __do_fast_syscall_32+0x2af/0x480 [ 1137.127409][T21762] do_fast_syscall_32+0x6b/0xd0 [ 1137.132239][T21762] do_SYSENTER_32+0x73/0x90 [ 1137.136728][T21762] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1137.143030][T21762] [ 1137.145342][T21762] Local variable ----msg_sys@do_recvmmsg created at: [ 1137.152001][T21762] do_recvmmsg+0xbf/0x22c0 [ 1137.156401][T21762] do_recvmmsg+0xbf/0x22c0 15:38:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet(r0, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f000034f000)) 15:38:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0xa6, 0x0) 15:38:25 executing program 2: init_module(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 15:38:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0) 15:38:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:38:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x2e2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 15:38:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:38:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:38:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 15:38:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x6, &(0x7f0000000000), 0x0, 0x0, 0x0) 15:38:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) 15:38:26 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)) 15:38:26 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 15:38:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1}, 0x22453f31}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 15:38:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = io_uring_setup(0x196, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x2e2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 15:38:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x7112}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0xfffffffd) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup2(r0, r1) io_setup(0x5, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0xff8e}]) 15:38:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 15:38:28 executing program 5: unshare(0x60000000) accept4(0xffffffffffffffff, 0x0, &(0x7f0000004a80), 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100025bd7000ffdbdf25010000030000000000000000060002000100000008000c0003000000140008006272696467653000000006"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc891) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) close(r1) 15:38:28 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) 15:38:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x5}) 15:38:29 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0xa) [ 1140.981667][T21909] input: syz1 as /devices/virtual/input/input12 15:38:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x12937c, 0x0) flock(r0, 0x4b8539bc0af29267) [ 1141.028436][T21914] IPVS: ftp: loaded support on port[0] = 21 15:38:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x9]}, 0x0, 0x8) 15:38:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x5) write(r0, &(0x7f0000000140)='H\x00\x00\x00', 0x4) 15:38:30 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:38:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x40000) [ 1143.474599][T21981] IPVS: ftp: loaded support on port[0] = 21 15:38:32 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r0, &(0x7f000001c840)=[{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}], 0x37, 0x0) 15:38:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)="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", 0xd87}, {&(0x7f0000002c40)="ffa75408f285135ea9e4b37324ab598169ffe3a3382b970c69ec388e02a3a079cfa8e1742fc33b3ed6a82c9090b1e30743c33f3d46bc089bdbb3af7934acca293ec0b739ae895ad69ce8523c696cc80babbc29c13cabb9ed2dc666f3c5ce7a828da43d5fa371e8c22399ac1c55e9a09fbed9257afbfa330b16a08d1dc772e8e40c02c4527a68509d2afb7694da3c57cc2caa2c7fd1a97386f36625b655cf0c1acff0fb97ec5186226a1c219c83dd0148741796e693c84f877c7cde349ab6136576281ab8fe5cc0064a552b87baf1a07c403ac5644952b1901d796e6a55dd6e519ab25dce8e7c", 0xe6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="c5", 0x1}], 0x1}}], 0x2, 0x488d5) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x22e8}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 15:38:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl(r0, 0x0, 0x0) [ 1144.485759][ T9292] tipc: TX() has been purged, node left! 15:38:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2e, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 15:38:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000300)='+', 0x1}], 0x1}], 0x1, 0xfc) 15:38:33 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 15:38:33 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x7ffff00e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 15:38:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010200000000000200000400000005000100070002000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 1145.306386][ T29] audit: type=1804 audit(1599406713.277:55): pid=22028 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir690127242/syzkaller.U8xv55/817/cgroup.controllers" dev="sda1" ino=16357 res=1 15:38:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x4008880) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='../file0\x00', 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000500)='/dev/vcsu\x00', 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e23}, 0x6e) link(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) 15:38:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e23, @empty}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x40}, [{0x0, 0x0, 0x0, 0x4}]}, 0x78) 15:38:33 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1145.809657][T22038] bridge3: port 1(macvlan0) entered blocking state [ 1145.816553][T22038] bridge3: port 1(macvlan0) entered disabled state [ 1145.826699][T22038] device macvlan0 entered promiscuous mode [ 1145.835757][T22038] bridge3: port 1(macvlan0) entered blocking state [ 1145.842547][T22038] bridge3: port 1(macvlan0) entered forwarding state 15:38:33 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000018001280080001833f381b2f87f10617a83c46e9", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') r3 = openat$vcs(0xffffff9c, 0x0, 0x88000, 0x0) sendfile(r1, r2, 0x0, 0x80000005) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x0) socket$inet6(0xa, 0x0, 0x0) 15:38:34 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 15:38:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)) 15:38:34 executing program 4: request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)='user\x00', 0xffffffffffffffff) 15:38:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000140)={0x0, "ac8d373c67b405afabe4e34677618c9b61702ff6c9299f9d088950029b84758e", 0x10}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x7ff, 0x0) socket$inet(0xa, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0xc00) 15:38:35 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0x0, &(0x7f0000000140)=[@assoc]}], 0x13c, 0x0) 15:38:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x58, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 15:38:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000180)='/dev/qrtr-tun\x00', 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 15:38:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x40) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:38:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1148.056775][ T29] audit: type=1400 audit(1599406716.027:56): avc: denied { set_context_mgr } for pid=22077 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 15:38:36 executing program 5: 15:38:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x0, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x94}}, 0x0) [ 1148.687289][ T9292] tipc: TX() has been purged, node left! 15:38:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:38:37 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 15:38:37 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 15:38:37 executing program 0: 15:38:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in6=@empty, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x67}, {0x188, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0xbd57}, {0x0, 0xfffffffffffffffa}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x2}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in=@multicast2, 0x3504, 0x0, 0x1, 0x1, 0xfffffe01, 0x8}}, 0xe4) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x4152) 15:38:38 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:38 executing program 4: 15:38:38 executing program 1: 15:38:38 executing program 5: 15:38:38 executing program 0: 15:38:38 executing program 2: 15:38:38 executing program 4: 15:38:38 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:39 executing program 1: 15:38:39 executing program 0: 15:38:39 executing program 5: 15:38:39 executing program 2: 15:38:39 executing program 4: 15:38:39 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:39 executing program 1: 15:38:39 executing program 0: 15:38:39 executing program 5: 15:38:39 executing program 2: 15:38:39 executing program 4: 15:38:40 executing program 1: 15:38:40 executing program 0: 15:38:40 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:40 executing program 5: 15:38:40 executing program 2: 15:38:40 executing program 4: 15:38:40 executing program 1: 15:38:40 executing program 0: 15:38:40 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:41 executing program 5: 15:38:41 executing program 2: 15:38:41 executing program 4: 15:38:41 executing program 1: 15:38:41 executing program 0: 15:38:41 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:41 executing program 5: 15:38:41 executing program 2: 15:38:41 executing program 4: 15:38:41 executing program 1: 15:38:42 executing program 0: 15:38:42 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:42 executing program 2: 15:38:42 executing program 5: 15:38:42 executing program 4: 15:38:42 executing program 1: 15:38:42 executing program 0: 15:38:42 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:42 executing program 2: 15:38:42 executing program 5: 15:38:42 executing program 4: 15:38:42 executing program 1: 15:38:43 executing program 0: 15:38:43 executing program 5: 15:38:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:43 executing program 4: 15:38:43 executing program 2: 15:38:43 executing program 1: 15:38:43 executing program 0: 15:38:43 executing program 5: 15:38:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:43 executing program 2: 15:38:43 executing program 1: 15:38:43 executing program 4: 15:38:44 executing program 0: 15:38:44 executing program 5: 15:38:44 executing program 4: 15:38:44 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:44 executing program 2: 15:38:44 executing program 1: 15:38:44 executing program 0: 15:38:45 executing program 2: 15:38:45 executing program 4: 15:38:45 executing program 5: 15:38:45 executing program 1: 15:38:45 executing program 0: 15:38:45 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:45 executing program 2: 15:38:45 executing program 4: 15:38:46 executing program 1: 15:38:46 executing program 5: 15:38:46 executing program 0: 15:38:46 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:46 executing program 2: 15:38:46 executing program 4: 15:38:46 executing program 1: 15:38:46 executing program 0: 15:38:46 executing program 5: 15:38:46 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:47 executing program 1: 15:38:47 executing program 4: 15:38:47 executing program 2: 15:38:47 executing program 0: 15:38:47 executing program 5: 15:38:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:47 executing program 2: 15:38:47 executing program 4: 15:38:47 executing program 0: 15:38:47 executing program 1: 15:38:47 executing program 5: 15:38:48 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:48 executing program 0: 15:38:48 executing program 4: 15:38:48 executing program 2: 15:38:48 executing program 1: 15:38:48 executing program 5: 15:38:48 executing program 0: 15:38:48 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:48 executing program 2: 15:38:48 executing program 4: 15:38:48 executing program 1: 15:38:48 executing program 5: 15:38:49 executing program 0: 15:38:49 executing program 4: 15:38:49 executing program 2: 15:38:49 executing program 3: r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:49 executing program 1: 15:38:49 executing program 5: 15:38:49 executing program 0: 15:38:49 executing program 2: 15:38:49 executing program 4: 15:38:49 executing program 1: 15:38:49 executing program 3: r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:50 executing program 5: 15:38:50 executing program 0: 15:38:50 executing program 2: 15:38:50 executing program 4: 15:38:50 executing program 1: 15:38:50 executing program 3: r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:50 executing program 0: 15:38:50 executing program 5: 15:38:50 executing program 2: 15:38:50 executing program 1: 15:38:50 executing program 4: 15:38:51 executing program 0: 15:38:51 executing program 3: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:51 executing program 5: 15:38:51 executing program 2: 15:38:51 executing program 4: 15:38:51 executing program 1: 15:38:51 executing program 0: 15:38:51 executing program 2: 15:38:51 executing program 3: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:52 executing program 5: 15:38:52 executing program 1: 15:38:52 executing program 4: 15:38:52 executing program 0: 15:38:52 executing program 2: 15:38:52 executing program 5: 15:38:52 executing program 3: r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:52 executing program 4: 15:38:52 executing program 1: 15:38:52 executing program 0: 15:38:53 executing program 2: 15:38:53 executing program 5: 15:38:53 executing program 4: 15:38:53 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:53 executing program 1: 15:38:53 executing program 0: 15:38:53 executing program 2: 15:38:53 executing program 5: 15:38:53 executing program 4: 15:38:53 executing program 1: 15:38:54 executing program 0: 15:38:54 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:54 executing program 2: 15:38:54 executing program 4: 15:38:54 executing program 1: 15:38:54 executing program 5: 15:38:54 executing program 0: 15:38:54 executing program 4: 15:38:54 executing program 2: 15:38:54 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:54 executing program 1: 15:38:54 executing program 5: 15:38:55 executing program 0: 15:38:55 executing program 2: 15:38:55 executing program 4: 15:38:55 executing program 1: 15:38:55 executing program 5: 15:38:55 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:55 executing program 0: 15:38:55 executing program 4: 15:38:55 executing program 2: 15:38:55 executing program 1: 15:38:55 executing program 5: 15:38:56 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:56 executing program 0: 15:38:56 executing program 4: 15:38:56 executing program 1: 15:38:56 executing program 2: 15:38:56 executing program 5: 15:38:56 executing program 0: 15:38:56 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:56 executing program 4: 15:38:56 executing program 2: 15:38:57 executing program 1: 15:38:57 executing program 5: 15:38:57 executing program 0: 15:38:57 executing program 4: 15:38:57 executing program 1: 15:38:57 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:57 executing program 2: 15:38:57 executing program 5: 15:38:57 executing program 0: 15:38:57 executing program 4: 15:38:58 executing program 1: 15:38:58 executing program 2: 15:38:58 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:58 executing program 5: 15:38:58 executing program 0: 15:38:58 executing program 4: 15:38:58 executing program 1: 15:38:58 executing program 2: 15:38:58 executing program 5: 15:38:58 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:59 executing program 0: 15:38:59 executing program 4: 15:38:59 executing program 1: 15:38:59 executing program 2: 15:38:59 executing program 5: 15:38:59 executing program 0: 15:38:59 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:38:59 executing program 4: 15:38:59 executing program 1: 15:38:59 executing program 2: 15:39:00 executing program 5: 15:39:00 executing program 0: 15:39:00 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:00 executing program 1: 15:39:00 executing program 4: 15:39:00 executing program 2: 15:39:00 executing program 5: 15:39:00 executing program 0: 15:39:00 executing program 1: 15:39:00 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:00 executing program 2: 15:39:00 executing program 4: 15:39:00 executing program 5: 15:39:01 executing program 0: 15:39:01 executing program 1: 15:39:01 executing program 4: 15:39:01 executing program 2: 15:39:01 executing program 5: 15:39:01 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1173.563283][T20537] Bluetooth: hci0: command 0x0406 tx timeout 15:39:01 executing program 0: 15:39:01 executing program 1: 15:39:01 executing program 2: 15:39:02 executing program 5: 15:39:02 executing program 4: 15:39:02 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:02 executing program 1: 15:39:02 executing program 0: 15:39:03 executing program 5: 15:39:03 executing program 2: 15:39:03 executing program 4: 15:39:03 executing program 1: 15:39:03 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:03 executing program 0: 15:39:03 executing program 4: 15:39:03 executing program 5: 15:39:03 executing program 2: 15:39:03 executing program 1: 15:39:03 executing program 0: 15:39:03 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:04 executing program 5: 15:39:04 executing program 4: 15:39:04 executing program 1: 15:39:04 executing program 2: 15:39:04 executing program 0: 15:39:04 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:04 executing program 4: 15:39:04 executing program 5: 15:39:04 executing program 2: 15:39:04 executing program 1: 15:39:04 executing program 0: 15:39:05 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:05 executing program 4: 15:39:05 executing program 5: 15:39:05 executing program 2: 15:39:05 executing program 1: 15:39:05 executing program 0: 15:39:05 executing program 4: 15:39:05 executing program 5: 15:39:05 executing program 1: 15:39:05 executing program 2: 15:39:05 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:05 executing program 0: 15:39:06 executing program 4: 15:39:06 executing program 5: 15:39:06 executing program 1: 15:39:06 executing program 0: 15:39:06 executing program 2: 15:39:06 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:06 executing program 1: 15:39:06 executing program 4: 15:39:06 executing program 5: 15:39:06 executing program 2: 15:39:06 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:07 executing program 0: 15:39:07 executing program 5: 15:39:07 executing program 4: 15:39:07 executing program 1: 15:39:07 executing program 2: 15:39:07 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:07 executing program 5: 15:39:07 executing program 0: 15:39:07 executing program 1: 15:39:07 executing program 2: 15:39:07 executing program 4: 15:39:08 executing program 5: 15:39:08 executing program 1: 15:39:08 executing program 0: 15:39:08 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:08 executing program 2: 15:39:08 executing program 4: 15:39:08 executing program 0: 15:39:08 executing program 1: 15:39:08 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:08 executing program 5: 15:39:08 executing program 2: 15:39:08 executing program 4: 15:39:09 executing program 0: 15:39:09 executing program 1: 15:39:09 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) 15:39:09 executing program 2: 15:39:09 executing program 4: 15:39:09 executing program 0: 15:39:09 executing program 1: 15:39:09 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:09 executing program 2: 15:39:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2b00}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x2, 0x401}) 15:39:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x80000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) 15:39:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:39:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000280)={0x3, @vbi}) 15:39:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0x80085617, 0x0) 15:39:10 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1182.483194][ T29] audit: type=1800 audit(1599406750.451:57): pid=22560 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16381 res=0 [ 1182.534200][T22562] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 15:39:10 executing program 4: personality(0x60000f) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) [ 1182.680338][ T29] audit: type=1800 audit(1599406750.551:58): pid=22563 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16379 res=0 [ 1182.815536][T22566] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 15:39:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x10\x01\x00t\t-\x81E\xb67\x92^\xd4\x81E\xb3-1\xa6)\x99+/\xdf\x80\x00\x00\x00Hc\x9ag\x8f\xa3\xae\x0e\xad\x8d\xcc\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)="8d57ec69b731336d9882498fea0c29850eaff25b88f1c9ec5e797da56cccad89735ef0d5eddb9269c88b2caa3f936c2eae27b17fd2f6a6ec5e12e5558673893f2866fff45c4cdfef85f0ecaed01057ab9f5f946e3be262995c39244273937550d8730f4c5caa422ead8bebda8548682ea79a3b4a4568c199443082f54a54e05150bd97fbeeed93", 0x87}, {&(0x7f0000000400)="3db6189eda170a92fab0b0952f922b1e28a16dd7b5a0a26cb99e736cd175568be4558cf1a6c08999372517978a6640c72ea6dc58986d9e59e8a9baa2f367fa3525209deec9ba1fb31b90f23e5b5e11368d2315d7d38a257b546afc7a337c4323fd54a2f27ba86dcdc9a8243157bac7481060e98b9ae73519927dc3561acea6da3282a29b70e916f97a87944e", 0x8c}, {&(0x7f00000004c0)="2c8caa02362082d40cea43ad87bdfeae1544438466727d60d19631fea372fc6d5d1b66a82d1801b751406cf8e71f87d4c542429b3bcdef870b6c5d239771263bdcfd1d817b6c0ecdec2e95dc8772a636b2330596b7d29be878915317662a585cf1c789c32976d111114128e558a51fea8ab676fd4ade125a21782cb72b95f038e262b73be6dc702c06428da9ee2fba1144ebb229e9a26f0aef1882ebaa1e85e00af528b72fb213a6b37200014fca963294502f5c8ddf7212d530d4ecc2434b394180511ce33afe9744", 0xc9}, {&(0x7f0000000700)="9ad1c3b5ef2ef3a58672336927f4650f174708e1d00dc0eec56c79253d638306abab810d", 0x24}], 0x4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) 15:39:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x400000000001, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="27c4ed424cbc87c00d2bbb3b79ded1282eaa4e45c1fa85001e6b3546344a956b62a9283eaae58b5508b0d2637d9f80f47a573e78e830a41da8", 0x39}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}, 0xc100) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffc, 0x400100) 15:39:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) 15:39:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x11}]}}}]}, 0x3c}}, 0x0) 15:39:11 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f000000af40)={0x0, 0x0, &(0x7f000000ae80)=[{0x0}], 0x1}, 0x0) 15:39:11 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x74623689f843f1fa}, 0x14) 15:39:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='freezer.state\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d800000018008108e00f80ecdb4cb9040a6965ef0f087c02e87c55a1bc000900b8004099100000000500150004008178a8001600120008c00600026fe48a51f00003ac0414c05c06ad01eb1e634154870fd00fde0000d67f6fa7007134cf6efb8000a007a290457f0189b316277ce06bbace80174c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3089ad809d5e1cace81ed0b7fece0b42a9ecbee5de6", 0xd8}], 0x1}, 0x0) 15:39:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x84, 0x72, 0x0, &(0x7f0000000040)) 15:39:11 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0xffffffff, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 15:39:11 executing program 1: syz_genetlink_get_family_id$batadv(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_io_uring_complete(0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 1183.918225][T22637] IPv6: NLM_F_CREATE should be specified when creating new route [ 1183.926439][T22637] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1184.106691][T22640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1184.161211][T22640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1184.170610][T22640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:39:12 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c08, 0x0, 0x7ff, 0x9, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1184.427586][T22641] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. 15:39:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'virt_wifi0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x7, 0x8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:12 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 15:39:12 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0xffaf) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1ff, 0x10740) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0xaeb7, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000001}]}) ioctl$KVM_SET_CPUID(r5, 0xae80, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) 15:39:13 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:13 executing program 4: openat$full(0xffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="6902020039000535d25a80648c63940d0324fc60100002400a000200051a82c137153e670435018003001700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, 0x0) 15:39:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETLINK(r0, 0x400454ce, 0x0) 15:39:13 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000080)) 15:39:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x21, 0x0, 0x0) [ 1185.939632][T22692] tap0: tun_chr_ioctl cmd 1074025678 [ 1185.945563][T22692] tap0: group set to 0 [ 1186.013961][T22695] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1186.022667][T22695] netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:14 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x29, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)="d7", 0x20000381}], 0x1}], 0x1, 0x0) [ 1186.159792][T22699] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1186.168176][T22699] netlink: 118081 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000000240)={"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"}) 15:39:14 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:39:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/184, 0xb8) read$char_usb(r0, 0x0, 0x5d) 15:39:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1186.750611][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1186.864278][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 15:39:14 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:15 executing program 0: socket(0xa, 0x6, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x358}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) socket$inet_sctp(0x2, 0x0, 0x84) 15:39:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) ioctl$KVM_CREATE_DEVICE(r1, 0x400454cc, 0x0) 15:39:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_TAIL_ALIGN={0x8}]}}}]}, 0x3c}}, 0x0) 15:39:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0xce03}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x40) 15:39:15 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 15:39:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x500e, 0x0) [ 1187.587438][T22742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.599373][T22742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.610594][T22742] device bridge0 entered promiscuous mode 15:39:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0xe8) 15:39:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendfile(r1, r1, &(0x7f0000000080), 0xa198) [ 1188.485021][T22747] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 1188.496053][T22765] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 15:39:16 executing program 4: getpid() r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "c08dd2d5c7c806ae", "f35d6122457a61a0ba17f0c1fc809ebc", "b3652228", "546d0960f905210b"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00') write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000340)='1', 0x1) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x10) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x24) pipe(0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x54800, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) 15:39:16 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:39:16 executing program 0: getrusage(0x57b3615b607f03ea, 0x0) 15:39:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'geneve0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 15:39:16 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff02) 15:39:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000002540)='smaps\x00') semget(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80200020) 15:39:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 15:39:17 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:39:17 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000076e5000000000000000000000002000000000003cb25f1e073458c763700000000000200002003001900fc0101000000000090000000000000000000008000000000680100006801000056"], 0x1) 15:39:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 15:39:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) io_uring_setup(0x0, 0x0) [ 1190.087102][ T29] audit: type=1800 audit(1599406758.051:59): pid=22795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15969 res=0 15:39:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f00000001c0)) 15:39:18 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1190.241909][ T29] audit: type=1800 audit(1599406758.141:60): pid=22795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15776 res=0 15:39:18 executing program 5: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) set_mempolicy(0x1, &(0x7f0000000300)=0x75f, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) 15:39:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='system.sockprotoname\x00') 15:39:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x2}]}]}}]}, 0x3c}}, 0x0) 15:39:19 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1191.635349][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x14c00, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x5, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, 0x0}, 0x78) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffec6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) gettid() write$cgroup_int(r3, &(0x7f0000000200), 0x40006) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) 15:39:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xe, 0x0, &(0x7f0000000480)) 15:39:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delvlan={0x24, 0x70, 0x6bc6711ac5763745, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) 15:39:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x1}) 15:39:20 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f00000000c0)) 15:39:20 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) 15:39:20 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1192.438668][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:39:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getpid() listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}, 0x3000000}], 0x503, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, 0x0) 15:39:20 executing program 4: getpid() r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "c08dd2d5c7c806ae", "f35d6122457a61a0ba17f0c1fc809ebc", "b3652228", "546d0960f905210b"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="dc02", @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf250b000000a40001800800030081ffffff34000280080003000100000008000100190000000800010006000000080003008ff7ffff0800010017000000080002002a000000080003009a0000002400028008000300ff7fffff080004000800000008000100200000000800030000800000380004001400010002004e24e00000020000000000000000200002000a004e210000000220010000000000000000000000000000754f00002400028004000400080001000500000004000400080002000500000008000100ff000000480001804400028008000100190000000800030001000000080001001100000008000200ff7f00000800020004000000080003000100000008000400020000002400058008000100756470000800010065746800070001006962000008000100756470001c000380080003000100010008000300070000000800020001000080380007800c00040072000000000000000c0003000500000000000000080002000900000008000200090000000c0003000700000000000000500004804c00078008000400d84200000800030001040000080001000f000000080001000700000008000300000000000800040040000000080002000000000008000300000000800800030004000000c40004802c000780080001000900000008000400ff07000008000400060000000800040004000000080001000b0000001c0007800800010003000000080002006a000000080001001400000034000780ef50ff34c50f080003000c380000080001000d000000080003000700000008000300000000000800020000000000080001000e00000044000780080001001c000000080002000500000008000400"], 0x2dc}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe(0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x4030582a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) 15:39:20 executing program 1: setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x2000000) umount2(&(0x7f0000000080)='./file0\x00', 0x200000000000000) 15:39:20 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000, @loopback}, 0x1c) 15:39:20 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$addseals(r1, 0x409, 0x4) ftruncate(r0, 0x1) 15:39:21 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x207a04, 0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 15:39:21 executing program 1: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) 15:39:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0xd}]}]}]}, 0x4c}}, 0x0) 15:39:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x540a, &(0x7f0000000080)) 15:39:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) fstat(r2, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x3ff}}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x6, {0x29}}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x81, {{0x9, 0x401}}}, &(0x7f0000000300)={0x60, 0xffffffffffffffda, 0x1, {{0x7, 0x8, 0x0, 0x0, 0x7, 0x0, 0x3, 0x8}}}, &(0x7f00000023c0)={0x18, 0x0, 0xedeb2d7, {0x5}}, &(0x7f0000002400)={0x15, 0x0, 0x7fffffff, {'fuse\x00'}}, &(0x7f0000002440)={0x20, 0x0, 0xffffffff}, 0x0, &(0x7f0000004680)={0x90, 0x0, 0x5, {0x0, 0x1, 0x1ff, 0x6, 0xeeaf, 0x0, {0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x81, 0x0, 0x6000, 0x2, 0x0, 0xee01}}}, 0x0, &(0x7f0000004840)={0x150, 0x0, 0x2, [{{0x3, 0x0, 0x4, 0x6, 0x0, 0xbdc, {0x2, 0x0, 0x9ce8, 0x0, 0x2, 0x40, 0x3, 0x0, 0x1000, 0xe000, 0x0, 0xee00, 0xee01, 0x6, 0x9}}, {0x5, 0x6, 0x5, 0xf6bd, '**](\v'}}, {{0x0, 0x0, 0x7, 0x0, 0x3, 0x80, {0x0, 0x0, 0x9, 0x0, 0xc00000, 0x400, 0x0, 0x0, 0x0, 0x6000, 0x7, r3, 0xffffffffffffffff, 0x3}}, {0x6, 0x4, 0x2, 0x90, '$\\'}}]}, &(0x7f0000004a40)={0xa0, 0x0, 0x1, {{0x5, 0x3, 0xf3c1, 0x2, 0x0, 0x92, {0x0, 0x1ff, 0xfff, 0x9, 0x3, 0x4cf5, 0xfffff864, 0x8, 0xd3, 0x2000, 0xffffffff, 0xee01, 0xee01, 0x0, 0x1}}, {0x0, 0xc}}}, &(0x7f0000004b00)={0x20, 0x0, 0x80, {0x4, 0x0, 0x0, 0x400080}}}) ioprio_get$uid(0x0, r3) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="27c4ed424cbc87c00d2bbb3b79ded1282eaa4e45c1fa85001e6b3546344a956b62a9283eaae58b5508b0d2637d9f80f47a573e78e830a41da8", 0x39}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}, 0xc100) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffc, 0x400100) 15:39:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x10, 0x0, 0x0}) 15:39:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000000b000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r1, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001200)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7b2b030c5f92d2760308a34ee259464b263754f2301fcca13554f92ba59cf9d1ec0282c706000000c995d559d0e2c13959"}}, 0xffffff7a) 15:39:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getpid() listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}, 0x3000000}], 0x503, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f8, 0x0) 15:39:22 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setpriority(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) sendfile(r0, r1, 0x0, 0x80006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) dup(0xffffffffffffffff) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000000)=0x2) mmap$snddsp_control(&(0x7f00003f5000/0x4000)=nil, 0x1000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x83000000) 15:39:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 15:39:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 15:39:22 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x2, 0xe7}) 15:39:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x1404, 0x15}, 0x10}}, 0x0) 15:39:22 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) tee(r1, r0, 0x7, 0x0) 15:39:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) 15:39:23 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x800000)=nil, 0x7fffdffff000}, 0x1}) 15:39:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x48}}, 0x0) 15:39:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4008ae6a, &(0x7f0000000100)) 15:39:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 15:39:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000040)) 15:39:23 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7f) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) 15:39:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x331, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 15:39:24 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x5f6c}}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}], 0x1) 15:39:24 executing program 5: socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xffffffffffffffab, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x78b51088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file0\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000006340)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x1}}, 0x30) 15:39:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:39:24 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000100)={0x20071026}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff99) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, [], 0x27}, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 15:39:24 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1040, 0x0, 0x21, 0x3, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x1f, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8000, 0x5, 0x6, 0x2f}, {0x51a, 0xc3, 0x7f, 0x81}]}) clock_gettime(0x0, 0x0) getpid() gettid() rt_sigtimedwait(&(0x7f00000002c0)={[0xf51]}, &(0x7f0000000300), &(0x7f0000000380), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x14, 0x20, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @mcast1}]}, 0x30}}, 0x40000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000680)={0xfff, 0x5, 0x6}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x8, 0x10000, 0xffffffff}}) ioctl$RTC_UIE_OFF(r1, 0x7004) [ 1196.882791][T22946] rtc_cmos 00:00: Alarms can be up to one day in the future 15:39:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\xb6_,y<~\xab\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 1197.006704][T10040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1197.014316][T10040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1197.022020][T10040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1197.029508][T10040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1197.036985][T10040] rtc rtc0: __rtc_set_alarm: err=-22 [ 1197.123591][T22938] not chained 440000 origins [ 1197.128214][T22938] CPU: 0 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1197.136898][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.146949][T22938] Call Trace: [ 1197.150281][T22938] dump_stack+0x21c/0x280 [ 1197.154624][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1197.157522][T22946] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1197.160349][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.160370][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1197.160391][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1197.160412][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.160434][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1197.160456][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1197.160475][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.160496][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1197.160516][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1197.160585][T22938] ? _copy_from_user+0x201/0x310 [ 1197.223386][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.228596][T22938] __msan_chain_origin+0x50/0x90 [ 1197.233550][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.238690][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.243650][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.248170][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.253378][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1197.259276][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1197.264479][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1197.270114][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1197.275490][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1197.280250][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1197.285104][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.294750][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.300823][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.306978][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.312185][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.317046][T22938] do_SYSENTER_32+0x73/0x90 15:39:25 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 1197.321566][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.327975][T22938] RIP: 0023:0xf7fc1549 [ 1197.332029][T22938] Code: Bad RIP value. [ 1197.336090][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1197.344503][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1197.352474][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1197.360529][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.368587][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1197.376669][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.384660][T22938] Uninit was stored to memory at: [ 1197.389696][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.395522][T22938] __msan_chain_origin+0x50/0x90 [ 1197.400467][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.405588][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.410536][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.415040][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.419742][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.425813][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.431966][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.437164][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.442028][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.446536][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.452851][T22938] [ 1197.455173][T22938] Uninit was stored to memory at: [ 1197.460202][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.465925][T22938] __msan_chain_origin+0x50/0x90 [ 1197.470867][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.475981][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.480915][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.485499][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.490197][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.496262][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.502421][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.507643][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.512498][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.517121][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.523435][T22938] [ 1197.525773][T22938] Uninit was stored to memory at: [ 1197.530812][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.536553][T22938] __msan_chain_origin+0x50/0x90 [ 1197.541493][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.546604][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.551546][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.555473][T22945] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 1197.556051][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.556071][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.556090][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.556106][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.556158][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.593949][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.598469][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.604891][T22938] [ 1197.607214][T22938] Uninit was stored to memory at: [ 1197.612251][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.617967][T22938] __msan_chain_origin+0x50/0x90 [ 1197.622903][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.628011][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.632950][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.637474][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.642252][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.648325][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.654489][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.659692][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.664544][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.669050][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.675377][T22938] [ 1197.677701][T22938] Uninit was stored to memory at: [ 1197.682731][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.688452][T22938] __msan_chain_origin+0x50/0x90 [ 1197.693394][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.698506][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.703573][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.708074][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.712755][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.718826][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.724982][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.730191][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.735045][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.739553][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.745863][T22938] [ 1197.748183][T22938] Uninit was stored to memory at: [ 1197.753225][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.758945][T22938] __msan_chain_origin+0x50/0x90 [ 1197.763903][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.769012][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.773948][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.778452][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.783130][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.789196][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.795348][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.800546][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.805396][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.809900][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.816296][T22938] [ 1197.818618][T22938] Uninit was stored to memory at: [ 1197.823640][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1197.829353][T22938] __msan_chain_origin+0x50/0x90 [ 1197.834282][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1197.839392][T22938] get_compat_msghdr+0x108/0x2b0 [ 1197.844343][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1197.848861][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1197.853537][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1197.859600][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1197.865749][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1197.870947][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1197.875800][T22938] do_SYSENTER_32+0x73/0x90 [ 1197.880390][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1197.886704][T22938] [ 1197.889028][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1197.895696][T22938] do_recvmmsg+0xbf/0x22c0 [ 1197.900110][T22938] do_recvmmsg+0xbf/0x22c0 15:39:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe6c}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffff8}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80000001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5b}]}, 0x70}, 0x1, 0x0, 0x0, 0x1a100cddd361cb2c}, 0x4) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1198.006695][T20537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1198.014555][T20537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1198.022247][T20537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1198.029769][T20537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1198.037215][T20537] rtc rtc0: __rtc_set_alarm: err=-22 15:39:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:39:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0xe0]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1198.671537][ T372] Bluetooth: hci6: Frame reassembly failed (-84) 15:39:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) fsmount(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) geteuid() [ 1199.405068][T22939] not chained 450000 origins [ 1199.409708][T22939] CPU: 0 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1199.418376][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.428431][T22939] Call Trace: [ 1199.431734][T22939] dump_stack+0x21c/0x280 [ 1199.436081][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1199.441810][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.447010][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1199.452564][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1199.458639][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.463847][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1199.469655][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1199.475726][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.480929][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1199.486479][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1199.492553][T22939] ? _copy_from_user+0x201/0x310 [ 1199.497495][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.502698][T22939] __msan_chain_origin+0x50/0x90 [ 1199.507643][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.512773][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.517718][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.522239][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.527448][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1199.533348][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1199.538551][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1199.544186][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1199.549473][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1199.554232][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1199.559002][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.563695][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.569770][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.575924][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.581130][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.585980][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.590486][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.596809][T22939] RIP: 0023:0xf7fc1549 [ 1199.600880][T22939] Code: Bad RIP value. [ 1199.604943][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1199.613486][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1199.621460][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1199.629438][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.637413][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1199.645390][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.653375][T22939] Uninit was stored to memory at: [ 1199.658648][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1199.664370][T22939] __msan_chain_origin+0x50/0x90 [ 1199.669316][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.674437][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.679373][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.683884][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.688566][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.694721][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.700877][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.706083][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.710939][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.715449][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.721765][T22939] [ 1199.724086][T22939] Uninit was stored to memory at: [ 1199.729121][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1199.734842][T22939] __msan_chain_origin+0x50/0x90 [ 1199.739781][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.744894][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.749833][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.754353][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.759060][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.765125][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.771285][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.776488][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.781342][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.785850][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.792168][T22939] [ 1199.794491][T22939] Uninit was stored to memory at: [ 1199.799521][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1199.805247][T22939] __msan_chain_origin+0x50/0x90 [ 1199.810191][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.815305][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.820257][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.824762][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.829445][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.835514][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.841674][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.846962][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.851813][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.856323][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.862635][T22939] [ 1199.864954][T22939] Uninit was stored to memory at: [ 1199.869990][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1199.875702][T22939] __msan_chain_origin+0x50/0x90 [ 1199.880632][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.885726][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.890650][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.895140][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.899820][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.905893][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.912037][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.917222][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.922062][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.926558][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.932861][T22939] [ 1199.935174][T22939] Uninit was stored to memory at: [ 1199.940199][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1199.945905][T22939] __msan_chain_origin+0x50/0x90 [ 1199.950829][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1199.955922][T22939] get_compat_msghdr+0x108/0x2b0 [ 1199.960844][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1199.965330][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1199.969994][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1199.976047][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1199.982184][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1199.987368][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1199.992203][T22939] do_SYSENTER_32+0x73/0x90 [ 1199.996689][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.002994][T22939] [ 1200.005305][T22939] Uninit was stored to memory at: [ 1200.010326][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1200.016030][T22939] __msan_chain_origin+0x50/0x90 [ 1200.020951][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1200.026045][T22939] get_compat_msghdr+0x108/0x2b0 [ 1200.030964][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1200.035448][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1200.040110][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1200.046170][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1200.052325][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1200.057503][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1200.062335][T22939] do_SYSENTER_32+0x73/0x90 [ 1200.066818][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.073116][T22939] [ 1200.075424][T22939] Uninit was stored to memory at: [ 1200.080434][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1200.086135][T22939] __msan_chain_origin+0x50/0x90 [ 1200.091059][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1200.096153][T22939] get_compat_msghdr+0x108/0x2b0 [ 1200.101184][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1200.105671][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1200.110336][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1200.116390][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1200.122525][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1200.127705][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1200.132539][T22939] do_SYSENTER_32+0x73/0x90 [ 1200.137027][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.143324][T22939] [ 1200.145630][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1200.152286][T22939] do_recvmmsg+0xbf/0x22c0 [ 1200.156688][T22939] do_recvmmsg+0xbf/0x22c0 [ 1200.670225][ T8498] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1200.949557][T22938] not chained 460000 origins [ 1200.954189][T22938] CPU: 0 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1200.962844][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.972883][T22938] Call Trace: [ 1200.976177][T22938] dump_stack+0x21c/0x280 [ 1200.980513][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1200.986230][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1200.991416][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1200.996952][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1201.003008][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1201.008195][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1201.013990][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1201.020048][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1201.025236][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1201.030769][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1201.036825][T22938] ? _copy_from_user+0x201/0x310 [ 1201.041847][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1201.047034][T22938] __msan_chain_origin+0x50/0x90 [ 1201.051960][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.057079][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.062006][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.066511][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1201.071702][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1201.077583][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1201.082771][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1201.088474][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1201.093745][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1201.098499][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1201.103254][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.107926][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.114256][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.120395][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.125595][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.130435][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.134930][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.141240][T22938] RIP: 0023:0xf7fc1549 [ 1201.145286][T22938] Code: Bad RIP value. [ 1201.149337][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1201.157734][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1201.165703][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1201.173658][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1201.181613][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1201.189571][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1201.197542][T22938] Uninit was stored to memory at: [ 1201.202671][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.208381][T22938] __msan_chain_origin+0x50/0x90 [ 1201.213310][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.218427][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.223357][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.227844][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.232525][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.238585][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.244816][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.250004][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.254845][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.259340][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.265643][T22938] [ 1201.267954][T22938] Uninit was stored to memory at: [ 1201.272971][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.278675][T22938] __msan_chain_origin+0x50/0x90 [ 1201.283775][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.288867][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.293790][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.298276][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.302962][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.309009][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.315251][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.320433][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.325268][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.329757][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.336063][T22938] [ 1201.338369][T22938] Uninit was stored to memory at: [ 1201.343389][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.349198][T22938] __msan_chain_origin+0x50/0x90 [ 1201.354119][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.359215][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.364134][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.368757][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.373430][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.379533][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.385702][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.390899][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.395740][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.400237][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.406540][T22938] [ 1201.408851][T22938] Uninit was stored to memory at: [ 1201.413890][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.419601][T22938] __msan_chain_origin+0x50/0x90 [ 1201.424530][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.429635][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.434565][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.439057][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.443721][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.449780][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.455925][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.461114][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.465956][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.470448][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.476750][T22938] [ 1201.479059][T22938] Uninit was stored to memory at: [ 1201.484069][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.489777][T22938] __msan_chain_origin+0x50/0x90 [ 1201.494702][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.499797][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.504717][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.509218][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.513881][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.519933][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.526073][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.531257][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.536093][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.540586][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.546886][T22938] [ 1201.549196][T22938] Uninit was stored to memory at: [ 1201.554217][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.559922][T22938] __msan_chain_origin+0x50/0x90 [ 1201.564848][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.569966][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.574890][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.579377][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.584042][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.590094][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.596234][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.601435][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.606269][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.611277][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.617578][T22938] [ 1201.619889][T22938] Uninit was stored to memory at: [ 1201.624900][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1201.630605][T22938] __msan_chain_origin+0x50/0x90 [ 1201.635529][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1201.640638][T22938] get_compat_msghdr+0x108/0x2b0 [ 1201.645563][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1201.650054][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1201.654719][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1201.660772][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1201.666910][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1201.672110][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1201.676950][T22938] do_SYSENTER_32+0x73/0x90 [ 1201.681440][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.687743][T22938] [ 1201.690070][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1201.696728][T22938] do_recvmmsg+0xbf/0x22c0 [ 1201.701128][T22938] do_recvmmsg+0xbf/0x22c0 [ 1202.487907][T22939] not chained 470000 origins [ 1202.492535][T22939] CPU: 1 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1202.501199][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.511335][T22939] Call Trace: [ 1202.514633][T22939] dump_stack+0x21c/0x280 [ 1202.518977][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1202.524712][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.529955][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1202.535508][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1202.541583][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.546788][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1202.552598][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1202.558672][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.563872][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1202.569418][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1202.575494][T22939] ? _copy_from_user+0x201/0x310 [ 1202.580435][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.585633][T22939] __msan_chain_origin+0x50/0x90 [ 1202.590576][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1202.595702][T22939] get_compat_msghdr+0x108/0x2b0 [ 1202.600639][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1202.605262][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.610580][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1202.616472][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1202.621684][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1202.627316][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1202.632600][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1202.637358][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1202.642121][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1202.646813][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1202.652894][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1202.659045][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1202.664251][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1202.669102][T22939] do_SYSENTER_32+0x73/0x90 [ 1202.673607][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.679927][T22939] RIP: 0023:0xf7fc1549 [ 1202.683986][T22939] Code: Bad RIP value. [ 1202.688045][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1202.696454][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1202.704428][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1202.712392][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1202.720357][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1202.728339][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1202.736305][T22939] Uninit was stored to memory at: [ 1202.741325][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1202.747152][T22939] __msan_chain_origin+0x50/0x90 [ 1202.752076][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1202.757174][T22939] get_compat_msghdr+0x108/0x2b0 [ 1202.762095][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1202.766599][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1202.771261][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1202.777315][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1202.783455][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1202.788639][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1202.793562][T22939] do_SYSENTER_32+0x73/0x90 [ 1202.798242][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.804544][T22939] [ 1202.806856][T22939] Uninit was stored to memory at: [ 1202.811866][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1202.817567][T22939] __msan_chain_origin+0x50/0x90 [ 1202.822487][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1202.827583][T22939] get_compat_msghdr+0x108/0x2b0 [ 1202.832502][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1202.837003][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1202.841678][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1202.847729][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1202.853871][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1202.859056][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1202.863892][T22939] do_SYSENTER_32+0x73/0x90 [ 1202.868385][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.874687][T22939] [ 1202.876996][T22939] Uninit was stored to memory at: [ 1202.882010][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1202.887712][T22939] __msan_chain_origin+0x50/0x90 [ 1202.892651][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1202.897768][T22939] get_compat_msghdr+0x108/0x2b0 [ 1202.902691][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1202.907176][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1202.911856][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1202.918006][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1202.924147][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1202.929330][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1202.934164][T22939] do_SYSENTER_32+0x73/0x90 [ 1202.938654][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.944956][T22939] [ 1202.947270][T22939] Uninit was stored to memory at: [ 1202.952280][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1202.958111][T22939] __msan_chain_origin+0x50/0x90 [ 1202.963120][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1202.968218][T22939] get_compat_msghdr+0x108/0x2b0 [ 1202.973146][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1202.977638][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1202.982301][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1202.988354][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1202.994497][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1202.999687][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.004527][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.009026][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.015326][T22939] [ 1203.017636][T22939] Uninit was stored to memory at: [ 1203.022648][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.028354][T22939] __msan_chain_origin+0x50/0x90 [ 1203.033277][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.038371][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.043295][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.047782][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.052447][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.058496][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.064632][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.069816][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.074651][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.079142][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.085444][T22939] [ 1203.087761][T22939] Uninit was stored to memory at: [ 1203.092876][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.098577][T22939] __msan_chain_origin+0x50/0x90 [ 1203.103499][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.108595][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.113518][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.118006][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.122668][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.128718][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.134857][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.140042][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.144879][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.149369][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.155669][T22939] [ 1203.157978][T22939] Uninit was stored to memory at: [ 1203.162986][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.168688][T22939] __msan_chain_origin+0x50/0x90 [ 1203.173629][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.178743][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.183681][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.188174][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.192844][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.198897][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.205149][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.210335][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.215172][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.219666][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.226064][T22939] [ 1203.228383][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1203.235048][T22939] do_recvmmsg+0xbf/0x22c0 [ 1203.239468][T22939] do_recvmmsg+0xbf/0x22c0 [ 1203.362093][T22939] not chained 480000 origins [ 1203.366725][T22939] CPU: 1 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1203.375404][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.385461][T22939] Call Trace: [ 1203.388760][T22939] dump_stack+0x21c/0x280 [ 1203.393107][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1203.398833][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.404036][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1203.409585][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1203.415657][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.420948][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1203.426774][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1203.432846][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.438065][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1203.443613][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1203.449700][T22939] ? _copy_from_user+0x201/0x310 [ 1203.454650][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.459854][T22939] __msan_chain_origin+0x50/0x90 [ 1203.464795][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.469929][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.474876][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.479403][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.484606][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1203.490711][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1203.496152][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1203.501791][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1203.507091][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1203.511852][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1203.516632][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.521324][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.527413][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.533568][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.538779][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.543633][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.548226][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.554580][T22939] RIP: 0023:0xf7fc1549 [ 1203.558637][T22939] Code: Bad RIP value. [ 1203.562699][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1203.571108][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1203.579080][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1203.587053][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1203.595022][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1203.602992][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1203.610965][T22939] Uninit was stored to memory at: [ 1203.615999][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.621713][T22939] __msan_chain_origin+0x50/0x90 [ 1203.626639][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.631741][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.636661][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.641152][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.645815][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.651873][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.658033][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.663317][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.668151][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.672642][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.678943][T22939] [ 1203.681252][T22939] Uninit was stored to memory at: [ 1203.686263][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.691968][T22939] __msan_chain_origin+0x50/0x90 [ 1203.696886][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.701984][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.706908][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.711397][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.716149][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.722204][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.728518][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.733801][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.738647][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.743223][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.749523][T22939] [ 1203.751829][T22939] Uninit was stored to memory at: [ 1203.756841][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.762544][T22939] __msan_chain_origin+0x50/0x90 [ 1203.767466][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.772559][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.777477][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.781961][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.786621][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.792674][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.798820][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.804014][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.808847][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.813335][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.819635][T22939] [ 1203.821945][T22939] Uninit was stored to memory at: [ 1203.826953][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.832653][T22939] __msan_chain_origin+0x50/0x90 [ 1203.837578][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.842670][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.847587][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.852088][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.856753][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.862810][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.868946][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.874128][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.878958][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.883442][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.889752][T22939] [ 1203.892060][T22939] Uninit was stored to memory at: [ 1203.897067][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.902779][T22939] __msan_chain_origin+0x50/0x90 [ 1203.907701][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.912797][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.917718][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.922204][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.926868][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1203.932925][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1203.939065][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1203.944248][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1203.949084][T22939] do_SYSENTER_32+0x73/0x90 [ 1203.953574][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.959965][T22939] [ 1203.962273][T22939] Uninit was stored to memory at: [ 1203.967283][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1203.973005][T22939] __msan_chain_origin+0x50/0x90 [ 1203.977930][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1203.983028][T22939] get_compat_msghdr+0x108/0x2b0 [ 1203.987949][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1203.992450][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1203.997118][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.003167][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.009305][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1204.014488][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1204.019323][T22939] do_SYSENTER_32+0x73/0x90 [ 1204.023812][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.030111][T22939] [ 1204.032436][T22939] Uninit was stored to memory at: [ 1204.037445][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1204.043146][T22939] __msan_chain_origin+0x50/0x90 [ 1204.048065][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1204.053158][T22939] get_compat_msghdr+0x108/0x2b0 [ 1204.058100][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1204.062760][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1204.067421][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.073682][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.079820][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1204.085002][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1204.089839][T22939] do_SYSENTER_32+0x73/0x90 [ 1204.094338][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.100651][T22939] [ 1204.102959][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1204.109613][T22939] do_recvmmsg+0xbf/0x22c0 [ 1204.114011][T22939] do_recvmmsg+0xbf/0x22c0 [ 1204.297021][T22938] not chained 490000 origins [ 1204.301661][T22938] CPU: 1 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1204.310329][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.320376][T22938] Call Trace: [ 1204.323672][T22938] dump_stack+0x21c/0x280 [ 1204.328077][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1204.333839][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.339048][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1204.344607][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1204.350684][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.355889][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1204.361691][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1204.367746][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.372935][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1204.378487][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1204.384551][T22938] ? _copy_from_user+0x201/0x310 [ 1204.389490][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.394703][T22938] __msan_chain_origin+0x50/0x90 [ 1204.399650][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.404771][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.409713][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.414259][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.419456][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1204.425345][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1204.430537][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1204.436164][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1204.441452][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1204.446198][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1204.450987][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.455680][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.461744][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.467888][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.473174][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.478028][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.482525][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.488833][T22938] RIP: 0023:0xf7fc1549 [ 1204.492987][T22938] Code: Bad RIP value. [ 1204.497037][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1204.505433][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1204.513389][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1204.521344][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1204.529317][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1204.537273][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1204.545240][T22938] Uninit was stored to memory at: [ 1204.550516][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.556220][T22938] __msan_chain_origin+0x50/0x90 [ 1204.561145][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.566244][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.571169][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.575662][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.580323][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.586391][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.592639][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.597849][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.602698][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.607197][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.613610][T22938] [ 1204.615926][T22938] Uninit was stored to memory at: [ 1204.620943][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.626650][T22938] __msan_chain_origin+0x50/0x90 [ 1204.631594][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.636691][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.641614][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.646100][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.650766][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.656822][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.662960][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.668141][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.672995][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.677486][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.683811][T22938] [ 1204.686127][T22938] Uninit was stored to memory at: [ 1204.691138][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.696929][T22938] __msan_chain_origin+0x50/0x90 [ 1204.701848][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.706941][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.711952][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.716528][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.721193][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.727262][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.733400][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.738584][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.743422][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.747914][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.754304][T22938] [ 1204.756621][T22938] Uninit was stored to memory at: [ 1204.761634][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.767343][T22938] __msan_chain_origin+0x50/0x90 [ 1204.772272][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.777371][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.782293][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.786784][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.791448][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.797503][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.803642][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.808840][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.813678][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.818168][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.824469][T22938] [ 1204.826778][T22938] Uninit was stored to memory at: [ 1204.831785][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.837484][T22938] __msan_chain_origin+0x50/0x90 [ 1204.842412][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.847510][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.852435][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.856921][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.861601][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.867660][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.873799][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.878981][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.883827][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.888315][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.894701][T22938] [ 1204.897012][T22938] Uninit was stored to memory at: [ 1204.902034][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.907737][T22938] __msan_chain_origin+0x50/0x90 [ 1204.912666][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.917802][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.922724][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.927210][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1204.931873][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1204.937922][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1204.944060][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1204.949241][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1204.954081][T22938] do_SYSENTER_32+0x73/0x90 [ 1204.958572][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.964871][T22938] [ 1204.967181][T22938] Uninit was stored to memory at: [ 1204.972194][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1204.977900][T22938] __msan_chain_origin+0x50/0x90 [ 1204.982824][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1204.987922][T22938] get_compat_msghdr+0x108/0x2b0 [ 1204.992846][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1204.997334][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.002001][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.008055][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.014196][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.019379][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1205.024211][T22938] do_SYSENTER_32+0x73/0x90 [ 1205.028703][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.035004][T22938] [ 1205.037320][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1205.043973][T22938] do_recvmmsg+0xbf/0x22c0 [ 1205.048372][T22938] do_recvmmsg+0xbf/0x22c0 [ 1205.222617][T22938] not chained 500000 origins [ 1205.227334][T22938] CPU: 0 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1205.235995][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.246048][T22938] Call Trace: [ 1205.249344][T22938] dump_stack+0x21c/0x280 [ 1205.253677][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1205.259397][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.264592][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1205.270141][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1205.276210][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.281415][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1205.287219][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1205.293288][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.298482][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1205.304021][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1205.310094][T22938] ? _copy_from_user+0x201/0x310 [ 1205.315033][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.320233][T22938] __msan_chain_origin+0x50/0x90 [ 1205.325171][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1205.330296][T22938] get_compat_msghdr+0x108/0x2b0 [ 1205.335243][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1205.339768][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.344974][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1205.350878][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1205.356079][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1205.361716][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1205.367004][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1205.371786][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1205.376552][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.381249][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.387416][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.393662][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.398871][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1205.403723][T22938] do_SYSENTER_32+0x73/0x90 [ 1205.408231][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.414668][T22938] RIP: 0023:0xf7fc1549 [ 1205.418729][T22938] Code: Bad RIP value. [ 1205.422791][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1205.431201][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1205.439180][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1205.447147][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1205.455117][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1205.463090][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1205.471062][T22938] Uninit was stored to memory at: [ 1205.476100][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1205.481997][T22938] __msan_chain_origin+0x50/0x90 [ 1205.486941][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1205.492055][T22938] get_compat_msghdr+0x108/0x2b0 [ 1205.494033][T22939] not chained 510000 origins [ 1205.496995][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1205.501579][T22939] CPU: 1 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1205.506054][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.514716][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.519372][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.529389][T22939] Call Trace: [ 1205.535438][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.538702][T22939] dump_stack+0x21c/0x280 [ 1205.544826][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.549130][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1205.554301][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1205.559992][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.564813][T22938] do_SYSENTER_32+0x73/0x90 [ 1205.569981][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1205.574471][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.579991][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1205.586277][T22938] [ 1205.592322][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.594632][T22938] Uninit was stored to memory at: [ 1205.599813][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1205.604806][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1205.610599][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1205.616290][T22938] __msan_chain_origin+0x50/0x90 [ 1205.622340][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.627265][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1205.632434][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1205.637515][T22938] get_compat_msghdr+0x108/0x2b0 [ 1205.643058][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1205.648446][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1205.654485][T22939] ? _copy_from_user+0x201/0x310 [ 1205.658958][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.663895][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.668544][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.673714][T22939] __msan_chain_origin+0x50/0x90 [ 1205.679752][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.684662][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1205.690787][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.695885][T22939] get_compat_msghdr+0x108/0x2b0 [ 1205.701045][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1205.705954][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1205.710779][T22938] do_SYSENTER_32+0x73/0x90 [ 1205.715265][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.719730][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.724914][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1205.731299][T22938] [ 1205.737177][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1205.739481][T22938] Uninit was stored to memory at: [ 1205.744660][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1205.749652][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1205.755257][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1205.760956][T22938] __msan_chain_origin+0x50/0x90 [ 1205.766210][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1205.771119][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1205.775854][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1205.780945][T22938] get_compat_msghdr+0x108/0x2b0 [ 1205.785681][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1205.790598][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1205.795257][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.799760][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.805804][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.810449][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.816578][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1205.822634][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.827804][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1205.833945][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.838767][T22939] do_SYSENTER_32+0x73/0x90 [ 1205.843937][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1205.848425][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.853245][T22938] do_SYSENTER_32+0x73/0x90 [ 1205.859535][T22939] RIP: 0023:0xf7fc1549 [ 1205.864009][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.868033][T22939] Code: Bad RIP value. [ 1205.874334][T22938] [ 1205.878377][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1205.880686][T22938] Uninit was stored to memory at: [ 1205.889083][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1205.894088][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1205.902041][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1205.907737][T22938] __msan_chain_origin+0x50/0x90 [ 1205.915678][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1205.920593][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1205.928534][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1205.933630][T22938] get_compat_msghdr+0x108/0x2b0 [ 1205.941662][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1205.946576][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1205.954520][T22939] Uninit was stored to memory at: [ 1205.959001][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1205.964020][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1205.968669][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1205.974436][T22939] __msan_chain_origin+0x50/0x90 [ 1205.980473][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1205.985392][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1205.991518][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1205.996602][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.001770][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1206.006676][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.011494][T22938] do_SYSENTER_32+0x73/0x90 [ 1206.015966][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.020442][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.025094][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.031377][T22938] [ 1206.037436][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.039735][T22938] Uninit was stored to memory at: [ 1206.045862][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.050856][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1206.056024][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.061729][T22938] __msan_chain_origin+0x50/0x90 [ 1206.066550][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.071456][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1206.076037][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.081122][T22938] get_compat_msghdr+0x108/0x2b0 [ 1206.087409][T22939] [ 1206.087421][T22939] Uninit was stored to memory at: [ 1206.092331][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1206.094638][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.099628][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1206.104271][T22939] __msan_chain_origin+0x50/0x90 [ 1206.109968][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.114615][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.119520][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.125572][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.130662][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1206.136781][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.141691][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1206.146856][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.151338][T22938] do_SYSENTER_32+0x73/0x90 [ 1206.156161][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.160805][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.165280][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.171314][T22938] [ 1206.177616][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.183729][T22938] Uninit was stored to memory at: [ 1206.186033][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.186055][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.191235][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1206.196234][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.201056][T22938] __msan_chain_origin+0x50/0x90 [ 1206.205534][T22939] [ 1206.211227][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1206.217512][T22939] Uninit was stored to memory at: [ 1206.222440][T22938] get_compat_msghdr+0x108/0x2b0 [ 1206.224747][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.229828][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1206.234946][T22939] __msan_chain_origin+0x50/0x90 [ 1206.239947][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1206.245660][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.250140][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.255049][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.259700][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.264787][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.270833][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1206.275743][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.281885][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1206.286374][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.291631][T22938] do_SYSENTER_32+0x73/0x90 [ 1206.296278][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.301097][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.307132][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.311604][T22938] [ 1206.317737][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.324030][T22938] Uninit was stored to memory at: [ 1206.329210][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.331516][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1206.336345][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.341355][T22938] __msan_chain_origin+0x50/0x90 [ 1206.345818][T22939] [ 1206.351520][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1206.357810][T22939] Uninit was stored to memory at: [ 1206.362733][T22938] get_compat_msghdr+0x108/0x2b0 [ 1206.365042][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.370122][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1206.375121][T22939] __msan_chain_origin+0x50/0x90 [ 1206.380107][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1206.385824][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.390328][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.395235][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.399884][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.404979][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.411034][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1206.415946][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.422074][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1206.426553][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.431724][T22938] do_SYSENTER_32+0x73/0x90 [ 1206.436375][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.441198][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.447233][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.451694][T22938] [ 1206.457826][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.464129][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1206.469305][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.471607][T22938] do_recvmmsg+0xbf/0x22c0 [ 1206.476434][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.483086][T22938] do_recvmmsg+0xbf/0x22c0 [ 1206.487550][T22939] [ 1206.504955][T22939] Uninit was stored to memory at: [ 1206.509983][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.515698][T22939] __msan_chain_origin+0x50/0x90 [ 1206.520630][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.525735][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.530664][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.535243][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.539950][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.546021][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.552171][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.557364][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.562201][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.566696][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.572999][T22939] [ 1206.575313][T22939] Uninit was stored to memory at: [ 1206.580324][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.586029][T22939] __msan_chain_origin+0x50/0x90 [ 1206.590957][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.596054][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.600977][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.605467][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.610139][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.616193][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.622337][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.627524][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.632362][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.636854][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.643154][T22939] [ 1206.645464][T22939] Uninit was stored to memory at: [ 1206.650489][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1206.656194][T22939] __msan_chain_origin+0x50/0x90 [ 1206.661117][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1206.666298][T22939] get_compat_msghdr+0x108/0x2b0 [ 1206.671220][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1206.675706][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1206.680367][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1206.686419][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1206.692582][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1206.697778][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1206.702612][T22939] do_SYSENTER_32+0x73/0x90 [ 1206.707102][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.713403][T22939] [ 1206.715713][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1206.722368][T22939] do_recvmmsg+0xbf/0x22c0 [ 1206.726764][T22939] do_recvmmsg+0xbf/0x22c0 [ 1207.141745][T22939] not chained 520000 origins [ 1207.146378][T22939] CPU: 0 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1207.155031][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.165068][T22939] Call Trace: [ 1207.168351][T22939] dump_stack+0x21c/0x280 [ 1207.172671][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1207.178380][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.183560][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1207.189094][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1207.195152][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.200343][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1207.206137][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1207.212201][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.217388][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1207.222922][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1207.228972][T22939] ? _copy_from_user+0x201/0x310 [ 1207.233896][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.239082][T22939] __msan_chain_origin+0x50/0x90 [ 1207.244007][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.249125][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.254070][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.258573][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.263761][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1207.269639][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1207.274822][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1207.280542][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1207.285816][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1207.290566][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1207.295319][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.300013][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.306085][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.312229][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.317425][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.322263][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.326767][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.333074][T22939] RIP: 0023:0xf7fc1549 [ 1207.337116][T22939] Code: Bad RIP value. [ 1207.341165][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1207.349559][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1207.357517][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1207.365473][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1207.373433][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1207.381401][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.389374][T22939] Uninit was stored to memory at: [ 1207.394391][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.400124][T22939] __msan_chain_origin+0x50/0x90 [ 1207.405052][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.410265][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.415197][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.419694][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.424380][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.430447][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.436588][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.441773][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.446608][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.451102][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.457406][T22939] [ 1207.459714][T22939] Uninit was stored to memory at: [ 1207.464723][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.470432][T22939] __msan_chain_origin+0x50/0x90 [ 1207.475357][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.480482][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.485409][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.489900][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.494564][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.500727][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.506885][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.512066][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.517005][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.521498][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.527812][T22939] [ 1207.530121][T22939] Uninit was stored to memory at: [ 1207.535133][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.540837][T22939] __msan_chain_origin+0x50/0x90 [ 1207.545762][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.550860][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.555786][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.560278][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.564943][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.570995][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.577131][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.582313][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.587149][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.591637][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.597937][T22939] [ 1207.600246][T22939] Uninit was stored to memory at: [ 1207.605259][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.610964][T22939] __msan_chain_origin+0x50/0x90 [ 1207.615886][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.620985][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.625920][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.630418][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.635085][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.641139][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.647276][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.652458][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.657295][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.661785][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.668084][T22939] [ 1207.670389][T22939] Uninit was stored to memory at: [ 1207.675401][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.681107][T22939] __msan_chain_origin+0x50/0x90 [ 1207.686057][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.691153][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.696072][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.700559][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.705222][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.711278][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.717420][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.722603][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.727442][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.731931][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.738239][T22939] [ 1207.740557][T22939] Uninit was stored to memory at: [ 1207.745573][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.751276][T22939] __msan_chain_origin+0x50/0x90 [ 1207.756215][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.761313][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.766242][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.770743][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.775409][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.781472][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.787631][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.792820][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.797675][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.802168][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.808474][T22939] [ 1207.810862][T22939] Uninit was stored to memory at: [ 1207.815879][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1207.821583][T22939] __msan_chain_origin+0x50/0x90 [ 1207.826507][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1207.831606][T22939] get_compat_msghdr+0x108/0x2b0 [ 1207.836544][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1207.841031][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1207.845695][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1207.851749][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1207.857898][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1207.863085][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1207.867923][T22939] do_SYSENTER_32+0x73/0x90 [ 1207.872419][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.878720][T22939] [ 1207.881032][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1207.887685][T22939] do_recvmmsg+0xbf/0x22c0 [ 1207.892083][T22939] do_recvmmsg+0xbf/0x22c0 [ 1208.153862][T22939] not chained 530000 origins [ 1208.158489][T22939] CPU: 0 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1208.167160][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.177209][T22939] Call Trace: [ 1208.180502][T22939] dump_stack+0x21c/0x280 [ 1208.184837][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1208.190693][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.195892][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1208.201454][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1208.207526][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.212734][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1208.218655][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1208.224773][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.230009][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1208.235575][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1208.241666][T22939] ? _copy_from_user+0x201/0x310 [ 1208.246621][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.251819][T22939] __msan_chain_origin+0x50/0x90 [ 1208.256763][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.261887][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.266831][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.271359][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.276591][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1208.282491][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1208.287695][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1208.293334][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1208.298622][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1208.303465][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1208.308234][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.312930][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.319010][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.325185][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.330544][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.335399][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.339952][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.346276][T22939] RIP: 0023:0xf7fc1549 [ 1208.350365][T22939] Code: Bad RIP value. [ 1208.354434][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1208.362856][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1208.370846][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1208.378824][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.386791][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1208.394783][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.402762][T22939] Uninit was stored to memory at: [ 1208.407788][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.413520][T22939] __msan_chain_origin+0x50/0x90 [ 1208.418466][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.423581][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.428537][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.433057][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.438004][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.444100][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.450260][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.455471][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.460322][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.464824][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.471131][T22939] [ 1208.473534][T22939] Uninit was stored to memory at: [ 1208.478557][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.484270][T22939] __msan_chain_origin+0x50/0x90 [ 1208.489203][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.494309][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.499244][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.503742][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.508414][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.514479][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.520735][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.525965][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.530813][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.535312][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.541673][T22939] [ 1208.543989][T22939] Uninit was stored to memory at: [ 1208.549013][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.554735][T22939] __msan_chain_origin+0x50/0x90 [ 1208.559671][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.564781][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.569721][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.574221][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.578896][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.584965][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.591128][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.596323][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.601177][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.605680][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.612002][T22939] [ 1208.614325][T22939] Uninit was stored to memory at: [ 1208.619352][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.625072][T22939] __msan_chain_origin+0x50/0x90 [ 1208.630008][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.635111][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.640045][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.644543][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.649236][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.655301][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.661455][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.666652][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.671497][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.675998][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.682305][T22939] [ 1208.684620][T22939] Uninit was stored to memory at: [ 1208.689643][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.695360][T22939] __msan_chain_origin+0x50/0x90 [ 1208.700309][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.705430][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.710367][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.714863][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.719541][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.725603][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.731753][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.736944][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.741783][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.746279][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.752586][T22939] [ 1208.754905][T22939] Uninit was stored to memory at: [ 1208.759929][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.765641][T22939] __msan_chain_origin+0x50/0x90 [ 1208.770567][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.775659][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.780578][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.785063][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.789738][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.795789][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.801928][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.807109][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.811948][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.816439][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.822737][T22939] [ 1208.825044][T22939] Uninit was stored to memory at: [ 1208.830054][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1208.835757][T22939] __msan_chain_origin+0x50/0x90 [ 1208.840680][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1208.845863][T22939] get_compat_msghdr+0x108/0x2b0 [ 1208.850796][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1208.855281][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1208.859947][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1208.865996][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1208.872248][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1208.877431][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1208.882268][T22939] do_SYSENTER_32+0x73/0x90 [ 1208.886760][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1208.893064][T22939] [ 1208.895376][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1208.902034][T22939] do_recvmmsg+0xbf/0x22c0 [ 1208.906433][T22939] do_recvmmsg+0xbf/0x22c0 [ 1208.999690][T22939] not chained 540000 origins [ 1209.004323][T22939] CPU: 0 PID: 22939 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1209.012984][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.023033][T22939] Call Trace: [ 1209.026331][T22939] dump_stack+0x21c/0x280 [ 1209.030672][T22939] kmsan_internal_chain_origin+0x6f/0x130 [ 1209.036400][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.041599][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1209.047139][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1209.053220][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.058426][T22939] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1209.064230][T22939] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1209.070292][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.075491][T22939] ? kmsan_set_origin_checked+0x95/0xf0 [ 1209.081036][T22939] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1209.087094][T22939] ? _copy_from_user+0x201/0x310 [ 1209.092021][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.097205][T22939] __msan_chain_origin+0x50/0x90 [ 1209.102136][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.107244][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.112170][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.116672][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.121960][T22939] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1209.127841][T22939] ? kmsan_get_metadata+0x116/0x180 [ 1209.133023][T22939] ? kmsan_internal_set_origin+0x75/0xb0 [ 1209.138644][T22939] ? __msan_poison_alloca+0xf0/0x120 [ 1209.143915][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1209.148676][T22939] ? __sys_recvmmsg+0xbb/0x610 [ 1209.153433][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.158108][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.164167][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.170311][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.175504][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.180345][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.184839][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.191153][T22939] RIP: 0023:0xf7fc1549 [ 1209.195198][T22939] Code: Bad RIP value. [ 1209.199246][T22939] RSP: 002b:00000000f55790cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1209.207639][T22939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1209.215606][T22939] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1209.223568][T22939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.231524][T22939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1209.239488][T22939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.247475][T22939] Uninit was stored to memory at: [ 1209.252496][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.258201][T22939] __msan_chain_origin+0x50/0x90 [ 1209.263121][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.268224][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.273154][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.280953][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.285620][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.291675][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.297817][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.303000][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.307848][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.312423][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.318725][T22939] [ 1209.321036][T22939] Uninit was stored to memory at: [ 1209.326055][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.331846][T22939] __msan_chain_origin+0x50/0x90 [ 1209.336772][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.341872][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.346808][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.351299][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.355966][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.362035][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.368182][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.373469][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.378333][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.382825][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.389130][T22939] [ 1209.391441][T22939] Uninit was stored to memory at: [ 1209.396464][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.402174][T22939] __msan_chain_origin+0x50/0x90 [ 1209.407096][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.412190][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.417115][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.421617][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.426284][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.432340][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.438478][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.443658][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.448498][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.452993][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.459296][T22939] [ 1209.461606][T22939] Uninit was stored to memory at: [ 1209.466612][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.472317][T22939] __msan_chain_origin+0x50/0x90 [ 1209.477241][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.482333][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.487260][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.491746][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.496425][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.502492][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.508626][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.513810][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.518643][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.523131][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.529433][T22939] [ 1209.531742][T22939] Uninit was stored to memory at: [ 1209.536769][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.542471][T22939] __msan_chain_origin+0x50/0x90 [ 1209.547408][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.552511][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.557444][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.561934][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.566617][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.572677][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.578820][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.584009][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.588978][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.593476][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.599799][T22939] [ 1209.602125][T22939] Uninit was stored to memory at: [ 1209.607154][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.612861][T22939] __msan_chain_origin+0x50/0x90 [ 1209.617787][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.622983][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.627906][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.632498][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.637163][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.643231][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.649369][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.654550][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.659386][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.663891][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.670192][T22939] [ 1209.672500][T22939] Uninit was stored to memory at: [ 1209.677520][T22939] kmsan_internal_chain_origin+0xad/0x130 [ 1209.683236][T22939] __msan_chain_origin+0x50/0x90 [ 1209.688161][T22939] __get_compat_msghdr+0x6db/0x9d0 [ 1209.693259][T22939] get_compat_msghdr+0x108/0x2b0 [ 1209.698183][T22939] do_recvmmsg+0xdbb/0x22c0 [ 1209.702673][T22939] __sys_recvmmsg+0x5dd/0x610 [ 1209.707339][T22939] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1209.713392][T22939] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1209.719544][T22939] __do_fast_syscall_32+0x2af/0x480 [ 1209.724816][T22939] do_fast_syscall_32+0x6b/0xd0 [ 1209.729651][T22939] do_SYSENTER_32+0x73/0x90 [ 1209.734153][T22939] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1209.740454][T22939] [ 1209.742763][T22939] Local variable ----msg_sys@do_recvmmsg created at: [ 1209.749420][T22939] do_recvmmsg+0xbf/0x22c0 [ 1209.753838][T22939] do_recvmmsg+0xbf/0x22c0 [ 1209.937422][T22938] not chained 550000 origins [ 1209.942047][T22938] CPU: 0 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1209.950708][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.960753][T22938] Call Trace: [ 1209.964054][T22938] dump_stack+0x21c/0x280 [ 1209.968389][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1209.974115][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1209.979317][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1209.984862][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1209.990930][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1209.996144][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1210.001951][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1210.008012][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.013209][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1210.018757][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1210.024830][T22938] ? _copy_from_user+0x201/0x310 [ 1210.029767][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.034966][T22938] __msan_chain_origin+0x50/0x90 [ 1210.039902][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.045039][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.049983][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.054501][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.059702][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1210.065588][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.070776][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1210.076421][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1210.081714][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1210.086470][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1210.091257][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.095951][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.102021][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.108166][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.113363][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.118221][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.122837][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.129159][T22938] RIP: 0023:0xf7fc1549 [ 1210.133217][T22938] Code: Bad RIP value. [ 1210.137275][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1210.145679][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1210.153650][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1210.161618][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1210.169585][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1210.177548][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1210.185525][T22938] Uninit was stored to memory at: [ 1210.190579][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.196302][T22938] __msan_chain_origin+0x50/0x90 [ 1210.201241][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.206349][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.211282][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.215779][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.220451][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.226509][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.232658][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.237852][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.242796][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.247290][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.253606][T22938] [ 1210.255934][T22938] Uninit was stored to memory at: [ 1210.260948][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.266654][T22938] __msan_chain_origin+0x50/0x90 [ 1210.271589][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.276682][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.281626][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.286235][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.290901][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.296970][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.303131][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.308314][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.313154][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.317647][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.323948][T22938] [ 1210.326255][T22938] Uninit was stored to memory at: [ 1210.331266][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.336985][T22938] __msan_chain_origin+0x50/0x90 [ 1210.341916][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.347032][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.351957][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.356455][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.361134][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.367190][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.373342][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.378530][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.383369][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.387860][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.394199][T22938] [ 1210.396519][T22938] Uninit was stored to memory at: [ 1210.401538][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.407242][T22938] __msan_chain_origin+0x50/0x90 [ 1210.412192][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.417309][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.422232][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.426725][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.431391][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.437443][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.443586][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.448779][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.453627][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.458122][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.464425][T22938] [ 1210.466735][T22938] Uninit was stored to memory at: [ 1210.471758][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.477466][T22938] __msan_chain_origin+0x50/0x90 [ 1210.482393][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.487513][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.492437][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.496925][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.501585][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.507722][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.513879][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.519081][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.523913][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.528404][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.534705][T22938] [ 1210.537014][T22938] Uninit was stored to memory at: [ 1210.542028][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.547731][T22938] __msan_chain_origin+0x50/0x90 [ 1210.552659][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.557760][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.562685][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.567172][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.571924][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.577979][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.584120][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.589391][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.594228][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.598719][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.605026][T22938] [ 1210.607334][T22938] Uninit was stored to memory at: [ 1210.612345][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1210.618061][T22938] __msan_chain_origin+0x50/0x90 [ 1210.622984][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.628077][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.632999][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.637486][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.642150][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.648201][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.654359][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.659539][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.664375][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.668864][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.675165][T22938] [ 1210.677475][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1210.684144][T22938] do_recvmmsg+0xbf/0x22c0 [ 1210.688561][T22938] do_recvmmsg+0xbf/0x22c0 [ 1210.781393][T22938] not chained 560000 origins [ 1210.786009][T22938] CPU: 0 PID: 22938 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1210.794672][T22938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.804721][T22938] Call Trace: [ 1210.808025][T22938] dump_stack+0x21c/0x280 [ 1210.812355][T22938] kmsan_internal_chain_origin+0x6f/0x130 [ 1210.818068][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.823256][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1210.828799][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1210.834865][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.840071][T22938] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1210.845875][T22938] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1210.851928][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.857117][T22938] ? kmsan_set_origin_checked+0x95/0xf0 [ 1210.862658][T22938] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1210.868718][T22938] ? _copy_from_user+0x201/0x310 [ 1210.873643][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.878848][T22938] __msan_chain_origin+0x50/0x90 [ 1210.883776][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1210.888883][T22938] get_compat_msghdr+0x108/0x2b0 [ 1210.893813][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1210.898321][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.903513][T22938] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1210.909407][T22938] ? kmsan_get_metadata+0x116/0x180 [ 1210.914594][T22938] ? kmsan_internal_set_origin+0x75/0xb0 [ 1210.920232][T22938] ? __msan_poison_alloca+0xf0/0x120 [ 1210.925512][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1210.930266][T22938] ? __sys_recvmmsg+0xbb/0x610 [ 1210.935029][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1210.939718][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1210.945888][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1210.952027][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1210.957216][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1210.962051][T22938] do_SYSENTER_32+0x73/0x90 [ 1210.966543][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1210.972855][T22938] RIP: 0023:0xf7fc1549 [ 1210.976903][T22938] Code: Bad RIP value. [ 1210.980981][T22938] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1210.989375][T22938] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1210.997328][T22938] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1211.005397][T22938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1211.013354][T22938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1211.021307][T22938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1211.029273][T22938] Uninit was stored to memory at: [ 1211.034283][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.040097][T22938] __msan_chain_origin+0x50/0x90 [ 1211.045108][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.050206][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.055128][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.059617][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.064283][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.070340][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.076589][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.081772][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.086627][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.091115][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.097415][T22938] [ 1211.099722][T22938] Uninit was stored to memory at: [ 1211.104731][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.110433][T22938] __msan_chain_origin+0x50/0x90 [ 1211.115354][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.120449][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.125369][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.129857][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.134518][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.140569][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.146706][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.151891][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.156726][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.161218][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.167519][T22938] [ 1211.169824][T22938] Uninit was stored to memory at: [ 1211.174834][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.180534][T22938] __msan_chain_origin+0x50/0x90 [ 1211.185486][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.190583][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.195505][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.200006][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.204673][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.210743][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.216879][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.222093][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.226930][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.231418][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.237718][T22938] [ 1211.240027][T22938] Uninit was stored to memory at: [ 1211.245044][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.250751][T22938] __msan_chain_origin+0x50/0x90 [ 1211.255675][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.260771][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.265689][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.270170][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.274831][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.280969][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.287105][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.292289][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.297125][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.301610][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.307908][T22938] [ 1211.310215][T22938] Uninit was stored to memory at: [ 1211.315225][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.320933][T22938] __msan_chain_origin+0x50/0x90 [ 1211.325857][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.330970][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.335901][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.340394][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.345064][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.351137][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.357417][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.362693][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.367530][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.372020][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.378324][T22938] [ 1211.380636][T22938] Uninit was stored to memory at: [ 1211.385646][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.391365][T22938] __msan_chain_origin+0x50/0x90 [ 1211.396306][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.401426][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.406364][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.410861][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.415547][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.421604][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.427748][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.432939][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.437776][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.442277][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.448594][T22938] [ 1211.450901][T22938] Uninit was stored to memory at: [ 1211.455912][T22938] kmsan_internal_chain_origin+0xad/0x130 [ 1211.461615][T22938] __msan_chain_origin+0x50/0x90 [ 1211.466535][T22938] __get_compat_msghdr+0x6db/0x9d0 [ 1211.471713][T22938] get_compat_msghdr+0x108/0x2b0 [ 1211.476631][T22938] do_recvmmsg+0xdbb/0x22c0 [ 1211.481118][T22938] __sys_recvmmsg+0x5dd/0x610 [ 1211.485781][T22938] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1211.491842][T22938] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1211.497973][T22938] __do_fast_syscall_32+0x2af/0x480 [ 1211.503155][T22938] do_fast_syscall_32+0x6b/0xd0 [ 1211.507985][T22938] do_SYSENTER_32+0x73/0x90 [ 1211.512471][T22938] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1211.518775][T22938] [ 1211.521083][T22938] Local variable ----msg_sys@do_recvmmsg created at: [ 1211.527752][T22938] do_recvmmsg+0xbf/0x22c0 [ 1211.532164][T22938] do_recvmmsg+0xbf/0x22c0 15:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x331, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) 15:39:39 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x41, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3001}) 15:39:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) 15:39:39 executing program 4: r0 = socket(0x2a, 0x2, 0x0) connect$caif(r0, 0x0, 0x0) [ 1212.167027][T23013] not chained 570000 origins [ 1212.171737][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1212.180414][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1212.190467][T23013] Call Trace: [ 1212.193748][T23013] dump_stack+0x21c/0x280 [ 1212.198071][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1212.203809][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.208993][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1212.214525][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1212.220591][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.225780][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1212.231601][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1212.237654][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.242841][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1212.248371][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1212.254450][T23013] ? _copy_from_user+0x201/0x310 [ 1212.259378][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.264569][T23013] __msan_chain_origin+0x50/0x90 [ 1212.269501][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.274615][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.279565][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.284074][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1212.289873][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.295061][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1212.301036][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1212.306223][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1212.311847][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1212.317124][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1212.321873][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1212.326640][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.331317][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.337376][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.343520][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.348732][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.353700][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.358198][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.364607][T23013] RIP: 0023:0xf7fc1549 [ 1212.368676][T23013] Code: Bad RIP value. [ 1212.372743][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1212.381154][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1212.389122][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1212.397290][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1212.405249][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1212.413208][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1212.421176][T23013] Uninit was stored to memory at: [ 1212.426207][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.431917][T23013] __msan_chain_origin+0x50/0x90 [ 1212.436846][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.441947][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.446870][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.451355][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.456018][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.462070][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.468211][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.473399][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.478237][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.482733][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.489034][T23013] [ 1212.491342][T23013] Uninit was stored to memory at: [ 1212.496365][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.502082][T23013] __msan_chain_origin+0x50/0x90 [ 1212.507015][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.512123][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.517044][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.521534][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.526197][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.532250][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.538393][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.543580][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.548417][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.552908][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.559212][T23013] [ 1212.561524][T23013] Uninit was stored to memory at: [ 1212.566641][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.572351][T23013] __msan_chain_origin+0x50/0x90 [ 1212.577274][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.582370][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.587287][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.591774][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.596439][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.602505][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.608643][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.613831][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.618670][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.623161][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.629463][T23013] [ 1212.631770][T23013] Uninit was stored to memory at: [ 1212.636783][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.642485][T23013] __msan_chain_origin+0x50/0x90 [ 1212.647408][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.652505][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.657436][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.661922][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.666588][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.672639][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.678782][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.683990][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.688833][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.693325][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.699634][T23013] [ 1212.701947][T23013] Uninit was stored to memory at: [ 1212.706955][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.712665][T23013] __msan_chain_origin+0x50/0x90 [ 1212.717588][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.722772][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.727698][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.732186][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.736852][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.742905][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.749044][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.754225][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.759062][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.763658][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.769968][T23013] [ 1212.772278][T23013] Uninit was stored to memory at: [ 1212.777292][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.782994][T23013] __msan_chain_origin+0x50/0x90 [ 1212.787914][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.793108][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.798049][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.802538][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.807198][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.813263][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.819414][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.824598][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.829438][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.833927][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.840227][T23013] [ 1212.842537][T23013] Uninit was stored to memory at: [ 1212.847568][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1212.853273][T23013] __msan_chain_origin+0x50/0x90 [ 1212.858197][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1212.863294][T23013] get_compat_msghdr+0x108/0x2b0 [ 1212.868224][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1212.872717][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1212.877385][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1212.883442][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1212.889587][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1212.894774][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1212.899611][T23013] do_SYSENTER_32+0x73/0x90 [ 1212.904099][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1212.910402][T23013] [ 1212.912716][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1212.919374][T23013] do_recvmmsg+0xbf/0x22c0 [ 1212.923860][T23013] do_recvmmsg+0xbf/0x22c0 15:39:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x2000}, 0xc) getpeername$netlink(r0, 0x0, &(0x7f0000000100)) 15:39:41 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0xc03, &(0x7f0000000180)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0xe0ff) 15:39:41 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x494, 0x2f4, 0x0, 0x294, 0x2f4, 0x294, 0x3cc, 0x378, 0x378, 0x3cc, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x2b4, 0x2f4, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_1\x00', {0x0, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "79e968880ccc1ead08db713078a9af4f9b88574f7f1bf77d65420c28387d342331a24364f67cdd5531e34b768a6af25a06020a619a8153fb71779c857f8a000f42a2770770960471510115cbbdcf01572fb35d1e47674b41b6c4a3dfe224559d8763d5f9bc9fbae3ee50f987a1ab15581079624c1d69074c91660b783b95127a"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4f0) 15:39:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x905, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team0\x00'}]}, 0x30}}, 0x0) 15:39:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "406b8c3c"}, 0x0, 0x0, @fd}) [ 1213.156865][T23019] xt_hashlimit: overflow, rate too high: 0 15:39:41 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000003, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "406b8c3c"}, 0x0, 0x0, @fd}) 15:39:41 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x30f0d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1214.349402][T23013] not chained 580000 origins [ 1214.354135][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1214.362799][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.372852][T23013] Call Trace: [ 1214.376158][T23013] dump_stack+0x21c/0x280 [ 1214.380503][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1214.386229][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.391438][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1214.396992][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1214.403078][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.408282][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1214.414113][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1214.420187][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.425393][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1214.430957][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1214.437030][T23013] ? _copy_from_user+0x201/0x310 [ 1214.441974][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.447171][T23013] __msan_chain_origin+0x50/0x90 [ 1214.452113][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.457248][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.462200][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.466714][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1214.472533][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.477757][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1214.483658][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1214.488864][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1214.494504][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1214.499793][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1214.505253][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1214.510022][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.514723][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.520803][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.527067][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.532278][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.537280][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.541792][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.548211][T23013] RIP: 0023:0xf7fc1549 [ 1214.552269][T23013] Code: Bad RIP value. [ 1214.556332][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1214.564744][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1214.572715][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1214.580686][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.588655][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1214.596624][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.604603][T23013] Uninit was stored to memory at: [ 1214.609636][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.615357][T23013] __msan_chain_origin+0x50/0x90 [ 1214.620300][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.625416][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.630353][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.634855][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.639537][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.645609][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.651768][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.656970][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.661822][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.666328][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.672642][T23013] [ 1214.674970][T23013] Uninit was stored to memory at: [ 1214.680002][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.685728][T23013] __msan_chain_origin+0x50/0x90 [ 1214.690683][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.695800][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.700740][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.705359][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.710047][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.716127][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.722307][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.727515][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.732374][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.736897][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.743209][T23013] [ 1214.745546][T23013] Uninit was stored to memory at: [ 1214.750580][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.756303][T23013] __msan_chain_origin+0x50/0x90 [ 1214.761246][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.766360][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.771300][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.775810][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.780490][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.786562][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.792722][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.798098][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.802953][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.807463][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.813863][T23013] [ 1214.816189][T23013] Uninit was stored to memory at: [ 1214.821219][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.826944][T23013] __msan_chain_origin+0x50/0x90 [ 1214.831889][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.837006][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.841959][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.846466][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.851147][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.857217][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.863632][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.868836][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.873690][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.878197][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.884509][T23013] [ 1214.886833][T23013] Uninit was stored to memory at: [ 1214.891865][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.897592][T23013] __msan_chain_origin+0x50/0x90 [ 1214.902532][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.907645][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.912583][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.917119][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.921804][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.927873][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1214.934030][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1214.939227][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1214.944074][T23013] do_SYSENTER_32+0x73/0x90 [ 1214.948576][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1214.954886][T23013] [ 1214.957206][T23013] Uninit was stored to memory at: [ 1214.962234][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1214.967947][T23013] __msan_chain_origin+0x50/0x90 [ 1214.972888][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1214.978006][T23013] get_compat_msghdr+0x108/0x2b0 [ 1214.982943][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1214.987449][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1214.992216][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1214.998291][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.004465][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.009667][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.014521][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.019028][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.025343][T23013] [ 1215.027662][T23013] Uninit was stored to memory at: [ 1215.032686][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1215.038402][T23013] __msan_chain_origin+0x50/0x90 [ 1215.043346][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.048454][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.053387][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.057887][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.062569][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.068646][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.074797][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.080003][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.084860][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.089370][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.095684][T23013] [ 1215.098030][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1215.104705][T23013] do_recvmmsg+0xbf/0x22c0 [ 1215.109119][T23013] do_recvmmsg+0xbf/0x22c0 [ 1215.483392][T23013] not chained 590000 origins [ 1215.488134][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1215.496797][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.506937][T23013] Call Trace: [ 1215.510235][T23013] dump_stack+0x21c/0x280 [ 1215.514572][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1215.520306][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.525528][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1215.531090][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1215.537159][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.542359][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1215.548170][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1215.554234][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.559439][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1215.564990][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1215.571061][T23013] ? _copy_from_user+0x201/0x310 [ 1215.575999][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.581199][T23013] __msan_chain_origin+0x50/0x90 [ 1215.586143][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.591271][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.596225][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.600739][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1215.606557][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.611774][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1215.617672][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1215.622873][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1215.628508][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1215.633793][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1215.638554][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1215.643324][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.648020][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.654101][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.660262][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.665473][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.670329][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.674840][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.681163][T23013] RIP: 0023:0xf7fc1549 [ 1215.685224][T23013] Code: Bad RIP value. [ 1215.689288][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1215.697700][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1215.705669][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1215.713637][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.721865][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1215.729835][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.737812][T23013] Uninit was stored to memory at: [ 1215.742841][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1215.748559][T23013] __msan_chain_origin+0x50/0x90 [ 1215.753496][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.758605][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.763539][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.768039][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.772719][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.778788][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.784944][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.790147][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.794999][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.799501][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.805812][T23013] [ 1215.808135][T23013] Uninit was stored to memory at: [ 1215.813162][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1215.818877][T23013] __msan_chain_origin+0x50/0x90 [ 1215.823811][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.828925][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.833865][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.838366][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.843048][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.849120][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.855282][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.860484][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.865333][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.869850][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.876160][T23013] [ 1215.878478][T23013] Uninit was stored to memory at: [ 1215.883539][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1215.889260][T23013] __msan_chain_origin+0x50/0x90 [ 1215.894203][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.899317][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.904252][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.908770][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.913453][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.919528][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.925686][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1215.930888][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1215.935739][T23013] do_SYSENTER_32+0x73/0x90 [ 1215.940246][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1215.946572][T23013] [ 1215.948889][T23013] Uninit was stored to memory at: [ 1215.953916][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1215.959641][T23013] __msan_chain_origin+0x50/0x90 [ 1215.964580][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1215.969696][T23013] get_compat_msghdr+0x108/0x2b0 [ 1215.974639][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1215.979148][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1215.983847][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1215.989927][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1215.996098][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.001328][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.006185][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.010692][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.017008][T23013] [ 1216.019332][T23013] Uninit was stored to memory at: [ 1216.024363][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.030086][T23013] __msan_chain_origin+0x50/0x90 [ 1216.035028][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.040141][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.045080][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.049583][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.054263][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.060331][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.066485][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.071700][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.076586][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.081089][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.087400][T23013] [ 1216.089714][T23013] Uninit was stored to memory at: [ 1216.094741][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.100469][T23013] __msan_chain_origin+0x50/0x90 [ 1216.105423][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.110535][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.115470][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.119977][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.124653][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.130721][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.136877][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.142078][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.146926][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.151429][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.157740][T23013] [ 1216.160066][T23013] Uninit was stored to memory at: [ 1216.165095][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.170815][T23013] __msan_chain_origin+0x50/0x90 [ 1216.175751][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.180857][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.185796][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.190321][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.194998][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.201076][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.207228][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.212443][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.217298][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.221807][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.228118][T23013] [ 1216.230437][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1216.237116][T23013] do_recvmmsg+0xbf/0x22c0 [ 1216.241634][T23013] do_recvmmsg+0xbf/0x22c0 [ 1216.458420][T23013] not chained 600000 origins [ 1216.463051][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1216.471737][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1216.481801][T23013] Call Trace: [ 1216.485347][T23013] dump_stack+0x21c/0x280 [ 1216.489772][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1216.495481][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.500678][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1216.506208][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1216.512267][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.517453][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1216.523232][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1216.529281][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.534516][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1216.540038][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1216.546120][T23013] ? _copy_from_user+0x201/0x310 [ 1216.551051][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.556238][T23013] __msan_chain_origin+0x50/0x90 [ 1216.561158][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.566252][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.571186][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.575721][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1216.581508][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.586684][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1216.592569][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1216.597762][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1216.603381][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1216.608653][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1216.613413][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1216.618166][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.622826][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.628886][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.635028][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.640209][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.645034][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.649529][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.655856][T23013] RIP: 0023:0xf7fc1549 [ 1216.659898][T23013] Code: Bad RIP value. [ 1216.664047][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1216.672431][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1216.680490][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1216.688455][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1216.696499][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1216.704532][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1216.712482][T23013] Uninit was stored to memory at: [ 1216.717481][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.723174][T23013] __msan_chain_origin+0x50/0x90 [ 1216.728086][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.733172][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.738084][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.742558][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.747204][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.753244][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.759378][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.764561][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.769395][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.773996][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.780464][T23013] [ 1216.782762][T23013] Uninit was stored to memory at: [ 1216.787776][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.793483][T23013] __msan_chain_origin+0x50/0x90 [ 1216.798398][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.803487][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.808395][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.812874][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.817525][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.823565][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.829964][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.835245][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.840098][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.844577][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.850876][T23013] [ 1216.853215][T23013] Uninit was stored to memory at: [ 1216.858211][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.863899][T23013] __msan_chain_origin+0x50/0x90 [ 1216.868825][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.873920][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.878835][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.883420][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.888085][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.894129][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.900274][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.905449][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.910286][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.914805][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.921098][T23013] [ 1216.923398][T23013] Uninit was stored to memory at: [ 1216.928397][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1216.934100][T23013] __msan_chain_origin+0x50/0x90 [ 1216.939023][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1216.944120][T23013] get_compat_msghdr+0x108/0x2b0 [ 1216.949058][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1216.953546][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1216.958193][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1216.964232][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1216.970369][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1216.975569][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1216.980395][T23013] do_SYSENTER_32+0x73/0x90 [ 1216.984870][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1216.991169][T23013] [ 1216.993484][T23013] Uninit was stored to memory at: [ 1216.998505][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.004209][T23013] __msan_chain_origin+0x50/0x90 [ 1217.009126][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.014221][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.019161][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.023635][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.028283][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.034334][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.040462][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.045636][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.050471][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.054975][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.061278][T23013] [ 1217.063601][T23013] Uninit was stored to memory at: [ 1217.068623][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.074328][T23013] __msan_chain_origin+0x50/0x90 [ 1217.079254][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.084333][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.089267][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.093753][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.098410][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.104463][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.110602][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.115788][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.120614][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.125092][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.131384][T23013] [ 1217.133703][T23013] Uninit was stored to memory at: [ 1217.138703][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.144404][T23013] __msan_chain_origin+0x50/0x90 [ 1217.149327][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.154445][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.159362][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.163844][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.168501][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.174662][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.180792][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.185963][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.190800][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.195297][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.201589][T23013] [ 1217.203889][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1217.210545][T23013] do_recvmmsg+0xbf/0x22c0 [ 1217.214943][T23013] do_recvmmsg+0xbf/0x22c0 [ 1217.380954][T23013] not chained 610000 origins [ 1217.385586][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1217.394287][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.404444][T23013] Call Trace: [ 1217.407750][T23013] dump_stack+0x21c/0x280 [ 1217.412098][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1217.417828][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.423036][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1217.428587][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1217.434747][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.439950][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1217.445760][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1217.451829][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.457030][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1217.462594][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1217.468669][T23013] ? _copy_from_user+0x201/0x310 [ 1217.473622][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.478818][T23013] __msan_chain_origin+0x50/0x90 [ 1217.483761][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.488887][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.493924][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.498434][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1217.504254][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.509460][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1217.515358][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1217.520564][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1217.526202][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1217.531491][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1217.536384][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1217.541156][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.545861][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.551944][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.558103][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.563312][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.568174][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.572684][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.579006][T23013] RIP: 0023:0xf7fc1549 [ 1217.583062][T23013] Code: Bad RIP value. [ 1217.587134][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1217.595547][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1217.603517][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1217.611487][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1217.619460][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1217.627431][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1217.635410][T23013] Uninit was stored to memory at: [ 1217.640443][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.646169][T23013] __msan_chain_origin+0x50/0x90 [ 1217.651115][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.656234][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.661180][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.665682][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.670358][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.676425][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.682667][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.687881][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.692748][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.697271][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.703590][T23013] [ 1217.705915][T23013] Uninit was stored to memory at: [ 1217.711038][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.716760][T23013] __msan_chain_origin+0x50/0x90 [ 1217.721711][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.726828][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.731777][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.736488][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.741176][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.747239][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.753370][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.758556][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.763394][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.768002][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.774294][T23013] [ 1217.776602][T23013] Uninit was stored to memory at: [ 1217.781606][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.787297][T23013] __msan_chain_origin+0x50/0x90 [ 1217.792250][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.797332][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.802242][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.806716][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.811368][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.817413][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.823557][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.828744][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.833730][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.838208][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.844503][T23013] [ 1217.846804][T23013] Uninit was stored to memory at: [ 1217.851840][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.857531][T23013] __msan_chain_origin+0x50/0x90 [ 1217.862443][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.867524][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.872439][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.876914][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.881567][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.887612][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.893742][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.898932][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.903774][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.908249][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.914543][T23013] [ 1217.916843][T23013] Uninit was stored to memory at: [ 1217.921848][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.927539][T23013] __msan_chain_origin+0x50/0x90 [ 1217.932458][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1217.937545][T23013] get_compat_msghdr+0x108/0x2b0 [ 1217.942458][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1217.946936][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1217.951599][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1217.957639][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1217.963770][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1217.968943][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1217.973771][T23013] do_SYSENTER_32+0x73/0x90 [ 1217.978246][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1217.984540][T23013] [ 1217.986842][T23013] Uninit was stored to memory at: [ 1217.991927][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1217.997615][T23013] __msan_chain_origin+0x50/0x90 [ 1218.002530][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.007612][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.012563][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.017040][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.021694][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.027733][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.033879][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.039065][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.043908][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.048407][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.054708][T23013] [ 1218.057007][T23013] Uninit was stored to memory at: [ 1218.062024][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.067721][T23013] __msan_chain_origin+0x50/0x90 [ 1218.072730][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.077817][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.082723][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.087204][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.091855][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.097894][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.104019][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.109189][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.114010][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.118496][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.124816][T23013] [ 1218.127116][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1218.133764][T23013] do_recvmmsg+0xbf/0x22c0 [ 1218.138167][T23013] do_recvmmsg+0xbf/0x22c0 [ 1218.347156][T23013] not chained 620000 origins [ 1218.351767][T23013] CPU: 1 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1218.360410][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.370465][T23013] Call Trace: [ 1218.373882][T23013] dump_stack+0x21c/0x280 [ 1218.378195][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1218.383895][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.389084][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1218.394621][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1218.400682][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.405860][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1218.411649][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1218.417691][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.422930][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1218.428465][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1218.434541][T23013] ? _copy_from_user+0x201/0x310 [ 1218.439473][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.444649][T23013] __msan_chain_origin+0x50/0x90 [ 1218.449590][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.454729][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.459683][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.464169][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1218.469972][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.475248][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1218.481217][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1218.486405][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1218.492127][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1218.497402][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1218.502142][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1218.506883][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.511585][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.517666][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.523813][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.529008][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.533850][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.538342][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.544652][T23013] RIP: 0023:0xf7fc1549 [ 1218.548698][T23013] Code: Bad RIP value. [ 1218.552749][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1218.561152][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1218.569197][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1218.577153][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1218.585099][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1218.593049][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1218.601014][T23013] Uninit was stored to memory at: [ 1218.606033][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.611740][T23013] __msan_chain_origin+0x50/0x90 [ 1218.616671][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.621761][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.626672][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.631146][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.635798][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.641856][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.647995][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.653185][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.658018][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.662496][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.668794][T23013] [ 1218.671108][T23013] Uninit was stored to memory at: [ 1218.676107][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.681802][T23013] __msan_chain_origin+0x50/0x90 [ 1218.686712][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.691800][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.696709][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.701201][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.705849][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.711903][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.718042][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.723303][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.728124][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.732699][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.739005][T23013] [ 1218.741313][T23013] Uninit was stored to memory at: [ 1218.746318][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.752012][T23013] __msan_chain_origin+0x50/0x90 [ 1218.756923][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.762006][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.766928][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.771403][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.776067][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.782104][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.788228][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.793408][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.798245][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.802731][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.809028][T23013] [ 1218.811340][T23013] Uninit was stored to memory at: [ 1218.816336][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.822037][T23013] __msan_chain_origin+0x50/0x90 [ 1218.826960][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.832058][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.836984][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.841476][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.846129][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.852171][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.858306][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.863486][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.868317][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.872832][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.879128][T23013] [ 1218.881434][T23013] Uninit was stored to memory at: [ 1218.886431][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.892125][T23013] __msan_chain_origin+0x50/0x90 [ 1218.897033][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.902118][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.907028][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.911513][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.916176][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.922221][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.928359][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1218.933562][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1218.938495][T23013] do_SYSENTER_32+0x73/0x90 [ 1218.943020][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1218.949319][T23013] [ 1218.951649][T23013] Uninit was stored to memory at: [ 1218.956648][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1218.962345][T23013] __msan_chain_origin+0x50/0x90 [ 1218.967260][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1218.972351][T23013] get_compat_msghdr+0x108/0x2b0 [ 1218.977261][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1218.981735][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1218.986384][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1218.992425][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1218.998569][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.003752][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.008585][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.013075][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.019370][T23013] [ 1219.021680][T23013] Uninit was stored to memory at: [ 1219.026678][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.032367][T23013] __msan_chain_origin+0x50/0x90 [ 1219.037279][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.042378][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.047300][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.051787][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.056439][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.062478][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.068612][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.073793][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.078632][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.083116][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.089414][T23013] [ 1219.091830][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1219.098484][T23013] do_recvmmsg+0xbf/0x22c0 [ 1219.102885][T23013] do_recvmmsg+0xbf/0x22c0 [ 1219.297958][T23013] not chained 630000 origins [ 1219.302605][T23013] CPU: 0 PID: 23013 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1219.311261][T23013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.321303][T23013] Call Trace: [ 1219.324595][T23013] dump_stack+0x21c/0x280 [ 1219.328939][T23013] kmsan_internal_chain_origin+0x6f/0x130 [ 1219.334669][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.339874][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1219.345431][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1219.351531][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.356739][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1219.362553][T23013] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1219.368621][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.373822][T23013] ? kmsan_set_origin_checked+0x95/0xf0 [ 1219.379372][T23013] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1219.385483][T23013] ? _copy_from_user+0x201/0x310 [ 1219.390449][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.395669][T23013] __msan_chain_origin+0x50/0x90 [ 1219.400635][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.405777][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.410733][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.415254][T23013] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1219.421082][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.426288][T23013] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1219.432189][T23013] ? kmsan_get_metadata+0x116/0x180 [ 1219.437389][T23013] ? kmsan_internal_set_origin+0x75/0xb0 [ 1219.443056][T23013] ? __msan_poison_alloca+0xf0/0x120 [ 1219.448346][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1219.453110][T23013] ? __sys_recvmmsg+0xbb/0x610 [ 1219.457868][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.462554][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.468602][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.474733][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.479912][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.484775][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.489254][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.495562][T23013] RIP: 0023:0xf7fc1549 [ 1219.499607][T23013] Code: Bad RIP value. [ 1219.503653][T23013] RSP: 002b:00000000f559a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1219.512046][T23013] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 1219.519994][T23013] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1219.528169][T23013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.536127][T23013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1219.544078][T23013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.552067][T23013] Uninit was stored to memory at: [ 1219.557111][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.562810][T23013] __msan_chain_origin+0x50/0x90 [ 1219.567726][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.572810][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.577719][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.582196][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.586846][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.592886][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.599046][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.604231][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.609057][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.613532][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.619823][T23013] [ 1219.622121][T23013] Uninit was stored to memory at: [ 1219.627121][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.632810][T23013] __msan_chain_origin+0x50/0x90 [ 1219.637723][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.642912][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.647835][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.652310][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.657484][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.663540][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.669669][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.674854][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.679680][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.684172][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.690465][T23013] [ 1219.692766][T23013] Uninit was stored to memory at: [ 1219.697777][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.703470][T23013] __msan_chain_origin+0x50/0x90 [ 1219.708380][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.713460][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.718369][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.722843][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.727506][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.733559][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.739687][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.744858][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.749680][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.754156][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.760447][T23013] [ 1219.762746][T23013] Uninit was stored to memory at: [ 1219.767742][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.773430][T23013] __msan_chain_origin+0x50/0x90 [ 1219.778340][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.783419][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.788326][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.792796][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.797440][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.803478][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.809605][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.814876][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.819699][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.824174][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.830465][T23013] [ 1219.832762][T23013] Uninit was stored to memory at: [ 1219.837763][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.843454][T23013] __msan_chain_origin+0x50/0x90 [ 1219.848379][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.853474][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.858382][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.862857][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.867594][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.873633][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.879756][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.884926][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.889760][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.894234][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.900527][T23013] [ 1219.902827][T23013] Uninit was stored to memory at: [ 1219.907824][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.913517][T23013] __msan_chain_origin+0x50/0x90 [ 1219.918426][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.923508][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.928419][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1219.932895][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1219.937547][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1219.943587][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1219.949712][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1219.954882][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1219.959705][T23013] do_SYSENTER_32+0x73/0x90 [ 1219.964179][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1219.970470][T23013] [ 1219.972767][T23013] Uninit was stored to memory at: [ 1219.977764][T23013] kmsan_internal_chain_origin+0xad/0x130 [ 1219.983567][T23013] __msan_chain_origin+0x50/0x90 [ 1219.988480][T23013] __get_compat_msghdr+0x6db/0x9d0 [ 1219.993561][T23013] get_compat_msghdr+0x108/0x2b0 [ 1219.998473][T23013] do_recvmmsg+0xdbb/0x22c0 [ 1220.002952][T23013] __sys_recvmmsg+0x5dd/0x610 [ 1220.007600][T23013] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 1220.013637][T23013] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 1220.019766][T23013] __do_fast_syscall_32+0x2af/0x480 [ 1220.024937][T23013] do_fast_syscall_32+0x6b/0xd0 [ 1220.029759][T23013] do_SYSENTER_32+0x73/0x90 [ 1220.034239][T23013] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1220.040531][T23013] [ 1220.042832][T23013] Local variable ----msg_sys@do_recvmmsg created at: [ 1220.049504][T23013] do_recvmmsg+0xbf/0x22c0 [ 1220.053894][T23013] do_recvmmsg+0xbf/0x22c0 15:39:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="dc5dbbb1eda341a3b795e062c15b29b56046", 0x23695c47dd5e9d3f, 0x0, 0x0, 0xfffffffffffffe29) 15:39:48 executing program 5: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 15:39:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) getsockname(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], r1}, 0x40) 15:39:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) 15:39:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7fe}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x159}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 15:39:48 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x30f0d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 15:39:48 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000001, 0x9}, 0x8000, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x1408, 0x1}, 0x10}}, 0x0) pipe(&(0x7f0000000380)) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x5000000, 0x0) 15:39:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 15:39:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}]}, 0x3c}}, 0x0) 15:39:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "90c53194f4bbcde64139060624af1a2ecec966"}) 15:39:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) unlink(&(0x7f0000000140)='./file0\x00') clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rmdir(&(0x7f00000001c0)='./file0\x00') 15:39:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0x92f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe, 0xd}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:39:49 executing program 5: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x0) r1 = getpgid(0x0) ioprio_get$pid(0x1, r1) 15:39:49 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x30f0d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 15:39:50 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x197) syz_open_dev$sg(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1222.371843][T23103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) [ 1222.801059][T23103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff1}]}) timer_delete(0x0) 15:39:50 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x68) 15:39:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x23, 0x0, &(0x7f0000000300)) 15:39:51 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:51 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x197) syz_open_dev$sg(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 15:39:51 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0xfd95) 15:39:51 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x30f0d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 15:39:51 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900f19f0000000000000000080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:39:51 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xff}, 0x18) 15:39:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x3}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30d) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpu.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x4}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x4, 0x8, 0x2, 0x1f, 0x0, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8b08, 0x2, 0xc07, 0x0, 0xff, 0x9, 0x1cc7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)) [ 1224.613566][T23160] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 15:39:52 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:52 executing program 5: clone(0x1000000218007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x40096100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 15:39:53 executing program 1: socket(0xa, 0x6, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 15:39:53 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 15:39:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}}, 0x0) [ 1225.304177][T23172] QAT: failed to copy from user cfg_data. [ 1225.314726][T23173] QAT: Invalid ioctl 15:39:53 executing program 5: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x480) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket(0x0, 0x0, 0x0) 15:39:53 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r2, r3, 0x0) 15:39:53 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpid() setpriority(0x2, r3, 0x3) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:39:53 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042040000000200", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab", [0x712dce36]}) 15:39:54 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:54 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x401) 15:39:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x8}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x0) 15:39:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) sendfile(r1, r0, 0x0, 0x8000) 15:39:54 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1c9001) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) 15:39:56 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000320003050000000000000000000000000800040020000000780001000c000100080001"], 0x94}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15:39:56 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x228, 0x5802, 0x294, 0x0, 0x294, 0x228, 0x378, 0x378, 0x228, 0x378, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], 0x0, 0xf4, 0x11c, 0x52020000, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}}, @common=@unspec=@connmark={{0x2c, 'connmark\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) pidfd_open(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x101400, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={0x2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) prctl$PR_GET_NO_NEW_PRIVS(0x27) 15:39:56 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:56 executing program 5: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 15:39:56 executing program 4: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) [ 1228.379235][T23243] xt_CT: You must specify a L4 protocol and not use inversions on it 15:39:56 executing program 1: connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x228, 0x5802, 0x294, 0x0, 0x294, 0x228, 0x378, 0x378, 0x228, 0x378, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2], 0x0, 0xf4, 0x11c, 0x52020000, {}, [@common=@inet=@ecn={{0x24, 'ecn\x00'}}, @common=@unspec=@connmark={{0x2c, 'connmark\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x34c) pidfd_open(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x101400, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000001c0)={0x2}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) prctl$PR_GET_NO_NEW_PRIVS(0x27) [ 1228.569025][T23250] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 15:39:56 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:56 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0x80045643, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) 15:39:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105511, &(0x7f00000000c0)={0x9}) [ 1228.884935][T23259] xt_CT: You must specify a L4 protocol and not use inversions on it 15:39:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) 15:39:57 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1229.304578][T23270] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1229.415743][T23290] bond1: (slave bridge2): making interface the new active one [ 1229.430021][T23290] bond1: (slave bridge2): Enslaving as an active interface with an up link 15:39:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x108, 0x118, 0x3e020000, 0x108, 0x118, 0x1d8, 0x1d0, 0x1d0, 0x1d8, 0x1d0, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x24, 'connlabel\x00'}}, @common=@addrtype={{0x2c, 'addrtype\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c8) [ 1229.465609][T23308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1229.477783][T23308] team0: Port device bond1 added 15:39:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) [ 1229.522006][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready 15:39:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001840)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, "b7"}, @mss={0x2, 0x4}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @fastopen={0x8, 0x6, "cc75182e"}, @mptcp=@remove_addr={0x1e, 0x0, 0x0, 0x0, "33063591ebc12f3d881907de7154cacc787a81f5416ca965292726cfd17d696b5e115abe016d595aeff42a9a5bf1d8ea0129d6924bc39af9887b4f38e83d8963da2e7d19e5a010606420bf503b1b2ac91ed4d5157a43df92718e7edb807953d2dbbb1e8280492e481dcbfebae9ea96f456c4fb18a3abc646ad5cc185600c8aa04238abe0e32ad09a655b1a961af8d7eee83a02d5442069f31842a0ddbef7785a526dd7aa9cdd3635894fbdb124ecf56eeb7f62fd57cd479f0e3021e616887ba8b00af25b00"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@generic={0x0, 0x0, "33fd05d64e3686c9ae9c0dc056eb18"}]}}}}}}}, 0x0) [ 1229.589078][ T8527] bond1: (slave bridge2): link status definitely down, disabling slave [ 1229.597737][ T8527] bond1: now running without any active interface! 15:39:57 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2b6) 15:39:57 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 1229.785802][T23290] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1229.885448][T23317] Cannot find add_set index 0 as target 15:39:57 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = getpid() syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sched_setscheduler(r2, 0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff46, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7ffffff7}]}) 15:39:58 executing program 2: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000011905030100000800000002000000240001001400010008000100ffffffff08000200acffffe70b0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000a3d400080007"], 0x70}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0) 15:39:58 executing program 0: keyctl$update(0x14, 0x0, &(0x7f0000000040)="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", 0xfffffffffffffe36) 15:39:58 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) 15:39:58 executing program 4: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)=0x3) 15:39:58 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) [ 1230.578555][ T29] audit: type=1800 audit(1599406798.545:61): pid=23332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16383 res=0 [ 1230.641156][T23336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:39:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000200)={{0x0, 0x3, 0x0, 0x80000000}, 0x0, [0x1acc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe77d, 0x0, 0x0, 0x0, 0xa75, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 15:39:58 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket(0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) 15:39:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x10\x01\x00t\t-\x81E\xb67\x92^\xd4\x81E\xb3-1\xa6)\x99+/\xdf\x80\x00\x00\x00Hc\x9ag\x8f\xa3\xae\x0e\xad\x8d\xcc\x00\x00\x00', 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)="8d57ec69b731336d9882498fea0c29850eaff25b88f1c9ec5e797da56cccad89735ef0d5eddb9269c88b2caa3f936c2eae27b17fd2f6a6ec5e12e5558673893f2866fff45c4cdfef85f0ecaed01057ab9f5f946e3be262995c39244273937550d8730f4c5caa422ead8bebda8548682ea79a3b4a4568c199443082f54a54e05150bd97fbeeed93", 0x87}, {&(0x7f0000000400)="3db6189eda170a92fab0b0952f922b1e28a16dd7b5a0a26cb99e736cd175568be4558cf1a6c08999372517978a6640c72ea6dc58986d9e59e8a9baa2f367fa3525209deec9ba1fb31b90f23e5b5e11368d2315d7d38a257b546afc7a337c4323fd54a2f27ba86dcdc9a8243157bac7481060e98b9ae73519927dc3561acea6da3282a29b70e916f97a87944e", 0x8c}, {&(0x7f00000004c0)="2c8caa02362082d40cea43ad87bdfeae1544438466727d60d19631fea372fc6d5d1b66a82d1801b751406cf8e71f87d4c542429b3bcdef870b6c5d239771263bdcfd1d817b6c0ecdec2e95dc8772a636b2330596b7d29be878915317662a585cf1c789c32976d111114128e558a51fea8ab676fd4ade125a21782cb72b95f038e262b73be6dc702c06428da9ee2fba1144ebb229e9a26f0aef1882ebaa1e85e00af528b72fb213a6b37200014fca963294502f5c8ddf7212d530d4ecc2434b394180511ce33afe9744", 0xc9}, {&(0x7f0000000700)="9ad1c3b5ef2ef3a58672336927f4650f174708e1d00dc0eec56c79253d638306abab810d", 0x24}], 0x4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"}) [ 1231.183121][ T29] audit: type=1800 audit(1599406799.155:62): pid=23332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16377 res=0 15:39:59 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) 15:39:59 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = socket(0x11, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x7, 0x4) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) ftruncate(r1, 0x200002) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, &(0x7f0000000140)=0xd178) 15:39:59 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d713f1}]}]}]}, 0x50}}, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 15:39:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 15:40:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000080)) 15:40:00 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000001980)={0x9, 0x2, 0x2}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044565d, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7aa65ae7"}, 0x0, 0x2, @userptr=0x81a0000, 0x96000}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 1232.370792][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 15:40:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15:40:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) [ 1232.745907][T23380] ===================================================== [ 1232.752910][T23380] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 1232.760372][T23380] CPU: 1 PID: 23380 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 1232.769030][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.779065][T23380] Call Trace: [ 1232.782354][T23380] dump_stack+0x21c/0x280 [ 1232.786672][T23380] kmsan_report+0xf7/0x1e0 [ 1232.791081][T23380] kmsan_internal_check_memory+0x238/0x3d0 [ 1232.796876][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1232.803017][T23380] kmsan_copy_to_user+0x81/0x90 [ 1232.807873][T23380] _copy_to_user+0x18e/0x260 [ 1232.812534][T23380] video_usercopy+0x24a9/0x3140 [ 1232.817415][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1232.823570][T23380] video_ioctl2+0x9f/0xb0 [ 1232.827892][T23380] ? video_usercopy+0x3140/0x3140 [ 1232.832903][T23380] v4l2_ioctl+0x255/0x290 [ 1232.837225][T23380] ? v4l2_poll+0x440/0x440 [ 1232.841678][T23380] do_video_ioctl+0x5e47/0x14e70 [ 1232.846609][T23380] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1232.852664][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1232.857505][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1232.862362][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1232.867653][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1232.872843][T23380] ? __msan_get_context_state+0x9/0x20 [ 1232.878287][T23380] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1232.883646][T23380] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 1232.889612][T23380] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1232.895750][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1232.901023][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1232.906302][T23380] v4l2_compat_ioctl32+0x2c0/0x370 [ 1232.911412][T23380] ? v4l2_fill_pixfmt+0xa10/0xa10 [ 1232.916479][T23380] __se_compat_sys_ioctl+0x55f/0x1100 [ 1232.921850][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1232.927040][T23380] __ia32_compat_sys_ioctl+0x4a/0x70 [ 1232.932448][T23380] __do_fast_syscall_32+0x2af/0x480 [ 1232.937642][T23380] do_fast_syscall_32+0x6b/0xd0 [ 1232.942479][T23380] do_SYSENTER_32+0x73/0x90 [ 1232.946969][T23380] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1232.953278][T23380] RIP: 0023:0xf7f50549 [ 1232.957326][T23380] Code: Bad RIP value. [ 1232.961376][T23380] RSP: 002b:00000000f554a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1232.969771][T23380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c044565d [ 1232.977729][T23380] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.985681][T23380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.993636][T23380] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.001595][T23380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.009645][T23380] [ 1233.011952][T23380] Local variable ----vb32.i@video_usercopy created at: [ 1233.018788][T23380] video_usercopy+0x20d7/0x3140 [ 1233.023634][T23380] video_usercopy+0x20d7/0x3140 [ 1233.028461][T23380] [ 1233.030775][T23380] Bytes 52-55 of 80 are uninitialized [ 1233.036124][T23380] Memory access of size 80 starts at ffff88804d4bf900 [ 1233.042863][T23380] Data copied to user address 00000000f554a070 [ 1233.048988][T23380] ===================================================== [ 1233.055904][T23380] Disabling lock debugging due to kernel taint [ 1233.062038][T23380] Kernel panic - not syncing: panic_on_warn set ... [ 1233.068610][T23380] CPU: 1 PID: 23380 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1233.078744][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.088777][T23380] Call Trace: [ 1233.092057][T23380] dump_stack+0x21c/0x280 [ 1233.096377][T23380] panic+0x4d7/0xef7 [ 1233.100273][T23380] ? add_taint+0x17c/0x210 [ 1233.104683][T23380] kmsan_report+0x1df/0x1e0 [ 1233.109179][T23380] kmsan_internal_check_memory+0x238/0x3d0 [ 1233.114977][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1233.121136][T23380] kmsan_copy_to_user+0x81/0x90 [ 1233.125972][T23380] _copy_to_user+0x18e/0x260 [ 1233.130559][T23380] video_usercopy+0x24a9/0x3140 [ 1233.135531][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1233.141673][T23380] video_ioctl2+0x9f/0xb0 [ 1233.145989][T23380] ? video_usercopy+0x3140/0x3140 [ 1233.150999][T23380] v4l2_ioctl+0x255/0x290 [ 1233.155321][T23380] ? v4l2_poll+0x440/0x440 [ 1233.159730][T23380] do_video_ioctl+0x5e47/0x14e70 [ 1233.164656][T23380] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1233.170712][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1233.175546][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1233.180388][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.185582][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.190774][T23380] ? __msan_get_context_state+0x9/0x20 [ 1233.196218][T23380] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1233.201578][T23380] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 1233.207545][T23380] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1233.213687][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.218892][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.224098][T23380] v4l2_compat_ioctl32+0x2c0/0x370 [ 1233.229238][T23380] ? v4l2_fill_pixfmt+0xa10/0xa10 [ 1233.234246][T23380] __se_compat_sys_ioctl+0x55f/0x1100 [ 1233.239613][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.244803][T23380] __ia32_compat_sys_ioctl+0x4a/0x70 [ 1233.250074][T23380] __do_fast_syscall_32+0x2af/0x480 [ 1233.255267][T23380] do_fast_syscall_32+0x6b/0xd0 [ 1233.260110][T23380] do_SYSENTER_32+0x73/0x90 [ 1233.264609][T23380] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.270930][T23380] RIP: 0023:0xf7f50549 [ 1233.274983][T23380] Code: Bad RIP value. [ 1233.279056][T23380] RSP: 002b:00000000f554a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1233.287455][T23380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c044565d [ 1233.295514][T23380] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.303469][T23380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.311430][T23380] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.319504][T23380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.328348][T23380] ------------[ cut here ]------------ [ 1233.333792][T23380] kernel BUG at mm/kmsan/kmsan.h:87! [ 1233.339055][T23380] invalid opcode: 0000 [#1] SMP [ 1233.343881][T23380] CPU: 1 PID: 23380 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1233.353906][T23380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.363940][T23380] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1233.370647][T23380] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1233.390236][T23380] RSP: 0018:ffff88804d4bf238 EFLAGS: 00010046 [ 1233.396291][T23380] RAX: 0000000000000002 RBX: 0000000005040250 RCX: 0000000005040250 [ 1233.404243][T23380] RDX: 0000000000000000 RSI: 0000000000000120 RDI: ffff88804d4bf31c [ 1233.412324][T23380] RBP: ffff88804d4bf2e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1233.420275][T23380] R10: 0000000000000002 R11: ffff88804e09bd00 R12: 0000000000000000 [ 1233.428223][T23380] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 1233.436183][T23380] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f554ab40 [ 1233.445084][T23380] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1233.451637][T23380] CR2: 0000000031d21000 CR3: 0000000109b3d000 CR4: 00000000001426e0 [ 1233.459578][T23380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1233.467523][T23380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1233.475463][T23380] Call Trace: [ 1233.478739][T23380] kmsan_check_memory+0xd/0x10 [ 1233.483474][T23380] iowrite8+0x99/0x300 [ 1233.487595][T23380] pvpanic_panic_notify+0xb7/0xe0 [ 1233.492613][T23380] ? pvpanic_mmio_remove+0x60/0x60 [ 1233.497726][T23380] atomic_notifier_call_chain+0x123/0x290 [ 1233.503422][T23380] panic+0x560/0xef7 [ 1233.507298][T23380] ? add_taint+0x17c/0x210 [ 1233.511691][T23380] kmsan_report+0x1df/0x1e0 [ 1233.516187][T23380] kmsan_internal_check_memory+0x238/0x3d0 [ 1233.521970][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1233.528110][T23380] kmsan_copy_to_user+0x81/0x90 [ 1233.532934][T23380] _copy_to_user+0x18e/0x260 [ 1233.537521][T23380] video_usercopy+0x24a9/0x3140 [ 1233.542364][T23380] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1233.548507][T23380] video_ioctl2+0x9f/0xb0 [ 1233.552813][T23380] ? video_usercopy+0x3140/0x3140 [ 1233.557811][T23380] v4l2_ioctl+0x255/0x290 [ 1233.562117][T23380] ? v4l2_poll+0x440/0x440 [ 1233.566510][T23380] do_video_ioctl+0x5e47/0x14e70 [ 1233.571423][T23380] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1233.577462][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1233.582303][T23380] ? sched_clock_cpu+0x65/0x8e0 [ 1233.587128][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.592310][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.597675][T23380] ? __msan_get_context_state+0x9/0x20 [ 1233.603110][T23380] ? idtentry_exit_cond_rcu+0x12/0x50 [ 1233.608454][T23380] ? sysvec_apic_timer_interrupt+0x11e/0x130 [ 1233.614406][T23380] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1233.620531][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.625714][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.630906][T23380] v4l2_compat_ioctl32+0x2c0/0x370 [ 1233.636084][T23380] ? v4l2_fill_pixfmt+0xa10/0xa10 [ 1233.641080][T23380] __se_compat_sys_ioctl+0x55f/0x1100 [ 1233.646435][T23380] ? kmsan_get_metadata+0x116/0x180 [ 1233.651604][T23380] __ia32_compat_sys_ioctl+0x4a/0x70 [ 1233.656862][T23380] __do_fast_syscall_32+0x2af/0x480 [ 1233.662031][T23380] do_fast_syscall_32+0x6b/0xd0 [ 1233.666963][T23380] do_SYSENTER_32+0x73/0x90 [ 1233.671440][T23380] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1233.677734][T23380] RIP: 0023:0xf7f50549 [ 1233.681983][T23380] Code: Bad RIP value. [ 1233.686019][T23380] RSP: 002b:00000000f554a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1233.694413][T23380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c044565d [ 1233.702363][T23380] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.710300][T23380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.718251][T23380] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.726289][T23380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.734323][T23380] Modules linked in: [ 1233.738211][T23380] ---[ end trace c4d2ef02fe758c2f ]--- [ 1233.743637][T23380] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 1233.750196][T23380] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 18 03 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 e2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 1233.769783][T23380] RSP: 0018:ffff88804d4bf238 EFLAGS: 00010046 [ 1233.775818][T23380] RAX: 0000000000000002 RBX: 0000000005040250 RCX: 0000000005040250 [ 1233.783759][T23380] RDX: 0000000000000000 RSI: 0000000000000120 RDI: ffff88804d4bf31c [ 1233.791701][T23380] RBP: ffff88804d4bf2e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 1233.799639][T23380] R10: 0000000000000002 R11: ffff88804e09bd00 R12: 0000000000000000 [ 1233.807661][T23380] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 1233.815604][T23380] FS: 0000000000000000(0000) GS:ffff88812fd00000(0063) knlGS:00000000f554ab40 [ 1233.824504][T23380] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1233.831059][T23380] CR2: 0000000031d21000 CR3: 0000000109b3d000 CR4: 00000000001426e0 [ 1233.839016][T23380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1233.846959][T23380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1233.854901][T23380] Kernel panic - not syncing: Fatal exception [ 1233.861558][T23380] Kernel Offset: disabled [ 1233.865867][T23380] Rebooting in 86400 seconds..