t_compat_msghdr+0x6db/0x9d0 [ 442.049825][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.054752][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.059243][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.063907][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.069975][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.076117][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.081311][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.086148][T12617] do_SYSENTER_32+0x73/0x90 [ 442.090636][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.096971][T12617] [ 442.099279][T12617] Uninit was stored to memory at: [ 442.104683][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.111831][T12617] __msan_chain_origin+0x54/0xa0 [ 442.117045][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.122265][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.127208][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.132720][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.137407][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.143481][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.149642][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.154855][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.159710][T12617] do_SYSENTER_32+0x73/0x90 [ 442.164204][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.170522][T12617] [ 442.172946][T12617] Uninit was stored to memory at: [ 442.177956][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.183676][T12617] __msan_chain_origin+0x54/0xa0 [ 442.188607][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.193706][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.198650][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.203160][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.207828][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.213887][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.220039][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.225242][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.230099][T12617] do_SYSENTER_32+0x73/0x90 [ 442.234593][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.240915][T12617] [ 442.243226][T12617] Uninit was stored to memory at: [ 442.248286][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.254133][T12617] __msan_chain_origin+0x54/0xa0 [ 442.259069][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.264176][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.269103][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.273599][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.278358][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.284449][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.290618][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.295825][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.300677][T12617] do_SYSENTER_32+0x73/0x90 [ 442.305167][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.311484][T12617] [ 442.313802][T12617] Uninit was stored to memory at: [ 442.318800][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.324523][T12617] __msan_chain_origin+0x54/0xa0 [ 442.329442][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.334556][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.339494][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.343981][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.348658][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.354709][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.360874][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.366058][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.370895][T12617] do_SYSENTER_32+0x73/0x90 [ 442.375385][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.381713][T12617] [ 442.384039][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 442.390712][T12617] do_recvmmsg+0xbf/0x22d0 [ 442.395123][T12617] do_recvmmsg+0xbf/0x22d0 [ 442.622602][T12617] not chained 70000 origins [ 442.627252][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 442.636004][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.646087][T12617] Call Trace: [ 442.649382][T12617] dump_stack+0x24c/0x2e0 [ 442.653706][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 442.659417][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 442.665226][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 442.671294][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 442.676058][T12617] ? kmsan_get_metadata+0x116/0x180 [ 442.681293][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 442.687102][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 442.693208][T12617] ? kmsan_get_metadata+0x116/0x180 [ 442.698426][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 442.704052][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 442.710120][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 442.715399][T12617] ? _copy_from_user+0x1fd/0x300 [ 442.720368][T12617] __msan_chain_origin+0x54/0xa0 [ 442.725295][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.730399][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.735332][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.739856][T12617] ? kmsan_get_metadata+0x116/0x180 [ 442.745048][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 442.750842][T12617] ? kmsan_get_metadata+0x116/0x180 [ 442.756055][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 442.761719][T12617] ? __msan_poison_alloca+0xec/0x110 [ 442.766991][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 442.771751][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.776426][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.782530][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.788677][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.793869][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.798737][T12617] do_SYSENTER_32+0x73/0x90 [ 442.803245][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.809578][T12617] RIP: 0023:0xf7fe3549 [ 442.813649][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 442.833261][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 442.841686][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 442.849647][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 442.857616][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.865602][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 442.873564][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.881533][T12617] Uninit was stored to memory at: [ 442.886543][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.892260][T12617] __msan_chain_origin+0x54/0xa0 [ 442.897245][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.902393][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.907336][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.911826][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.916496][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.922581][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.928725][T12617] __do_fast_syscall_32+0x127/0x180 [ 442.933914][T12617] do_fast_syscall_32+0x6a/0xc0 [ 442.938751][T12617] do_SYSENTER_32+0x73/0x90 [ 442.943251][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 442.949600][T12617] [ 442.951909][T12617] Uninit was stored to memory at: [ 442.956913][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 442.962663][T12617] __msan_chain_origin+0x54/0xa0 [ 442.967607][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 442.972723][T12617] get_compat_msghdr+0x108/0x2b0 [ 442.977651][T12617] do_recvmmsg+0xdc1/0x22d0 [ 442.982175][T12617] __sys_recvmmsg+0x519/0x6f0 [ 442.986879][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 442.992966][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 442.999123][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.004353][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.009256][T12617] do_SYSENTER_32+0x73/0x90 [ 443.013896][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.020334][T12617] [ 443.022645][T12617] Uninit was stored to memory at: [ 443.027654][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.033370][T12617] __msan_chain_origin+0x54/0xa0 [ 443.038316][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.043422][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.048350][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.052859][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.057548][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.063659][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.069820][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.075015][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.079880][T12617] do_SYSENTER_32+0x73/0x90 [ 443.084374][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.090733][T12617] [ 443.093039][T12617] Uninit was stored to memory at: [ 443.098044][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.103780][T12617] __msan_chain_origin+0x54/0xa0 [ 443.108944][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.114094][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.119224][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.123858][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.128674][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.134753][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.140941][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.146150][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.150995][T12617] do_SYSENTER_32+0x73/0x90 [ 443.155522][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.161896][T12617] [ 443.164232][T12617] Uninit was stored to memory at: [ 443.169234][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.174951][T12617] __msan_chain_origin+0x54/0xa0 [ 443.179899][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.185004][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.189937][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.194436][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.199142][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.205261][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.211420][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.216623][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.221677][T12617] do_SYSENTER_32+0x73/0x90 [ 443.226251][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.232590][T12617] [ 443.234911][T12617] Uninit was stored to memory at: [ 443.239931][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.245787][T12617] __msan_chain_origin+0x54/0xa0 [ 443.250775][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.255883][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.260841][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.265336][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.270002][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.276065][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.282237][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.287427][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.292267][T12617] do_SYSENTER_32+0x73/0x90 [ 443.296771][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.303130][T12617] [ 443.305451][T12617] Uninit was stored to memory at: [ 443.310453][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.316168][T12617] __msan_chain_origin+0x54/0xa0 [ 443.321138][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.326240][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.331164][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.335677][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.340366][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.346425][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.352568][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.357765][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.362605][T12617] do_SYSENTER_32+0x73/0x90 [ 443.367097][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.373421][T12617] [ 443.375731][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 443.382406][T12617] do_recvmmsg+0xbf/0x22d0 [ 443.386830][T12617] do_recvmmsg+0xbf/0x22d0 [ 443.612418][T12617] not chained 80000 origins [ 443.616983][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 443.625817][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.635868][T12617] Call Trace: [ 443.639165][T12617] dump_stack+0x24c/0x2e0 [ 443.643504][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 443.649210][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 443.655011][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 443.661091][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 443.665858][T12617] ? kmsan_get_metadata+0x116/0x180 [ 443.671043][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 443.676838][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 443.682933][T12617] ? kmsan_get_metadata+0x116/0x180 [ 443.688119][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 443.693738][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 443.699822][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 443.705097][T12617] ? _copy_from_user+0x1fd/0x300 [ 443.710040][T12617] __msan_chain_origin+0x54/0xa0 [ 443.714974][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.720114][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.725179][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.729683][T12617] ? kmsan_get_metadata+0x116/0x180 [ 443.734880][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 443.740718][T12617] ? kmsan_get_metadata+0x116/0x180 [ 443.745921][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 443.751558][T12617] ? __msan_poison_alloca+0xec/0x110 [ 443.756849][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 443.761631][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.766302][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.772365][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.778643][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.783918][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.788792][T12617] do_SYSENTER_32+0x73/0x90 [ 443.793290][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.799615][T12617] RIP: 0023:0xf7fe3549 [ 443.803672][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 443.823273][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 443.831685][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 443.839646][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 443.847606][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.855572][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 443.863554][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.871542][T12617] Uninit was stored to memory at: [ 443.876555][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.882303][T12617] __msan_chain_origin+0x54/0xa0 [ 443.887249][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.892361][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.897296][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.901818][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.906502][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.912558][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.918707][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.923936][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.928798][T12617] do_SYSENTER_32+0x73/0x90 [ 443.933294][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 443.939633][T12617] [ 443.941941][T12617] Uninit was stored to memory at: [ 443.946942][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 443.952678][T12617] __msan_chain_origin+0x54/0xa0 [ 443.957625][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 443.963398][T12617] get_compat_msghdr+0x108/0x2b0 [ 443.968378][T12617] do_recvmmsg+0xdc1/0x22d0 [ 443.972875][T12617] __sys_recvmmsg+0x519/0x6f0 [ 443.977570][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 443.983634][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 443.989781][T12617] __do_fast_syscall_32+0x127/0x180 [ 443.994978][T12617] do_fast_syscall_32+0x6a/0xc0 [ 443.999863][T12617] do_SYSENTER_32+0x73/0x90 [ 444.004382][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.010723][T12617] [ 444.013048][T12617] Uninit was stored to memory at: [ 444.018052][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.023788][T12617] __msan_chain_origin+0x54/0xa0 [ 444.028734][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.033837][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.039117][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.043610][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.048291][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.054347][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.060535][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.065727][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.070567][T12617] do_SYSENTER_32+0x73/0x90 [ 444.075060][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.081415][T12617] [ 444.083722][T12617] Uninit was stored to memory at: [ 444.088721][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.094434][T12617] __msan_chain_origin+0x54/0xa0 [ 444.099382][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.104776][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.109943][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.115528][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.120754][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.128712][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.135980][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.141321][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.146177][T12617] do_SYSENTER_32+0x73/0x90 [ 444.150745][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.157090][T12617] [ 444.159421][T12617] Uninit was stored to memory at: [ 444.164437][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.170361][T12617] __msan_chain_origin+0x54/0xa0 [ 444.175376][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.180667][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.185625][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.190147][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.194825][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.200935][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.207521][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.212719][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.217581][T12617] do_SYSENTER_32+0x73/0x90 [ 444.222098][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.228514][T12617] [ 444.230828][T12617] Uninit was stored to memory at: [ 444.235831][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.241566][T12617] __msan_chain_origin+0x54/0xa0 [ 444.246510][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.251807][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.256870][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.261419][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.266370][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.272473][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.278625][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.283834][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.288673][T12617] do_SYSENTER_32+0x73/0x90 [ 444.293176][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.299649][T12617] [ 444.302018][T12617] Uninit was stored to memory at: [ 444.307042][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.312771][T12617] __msan_chain_origin+0x54/0xa0 [ 444.317750][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.322996][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.327944][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.332484][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.337203][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.343301][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.349471][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.354670][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.359541][T12617] do_SYSENTER_32+0x73/0x90 [ 444.368201][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.374531][T12617] [ 444.376914][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 444.385252][T12617] do_recvmmsg+0xbf/0x22d0 [ 444.389685][T12617] do_recvmmsg+0xbf/0x22d0 [ 444.662858][T12617] not chained 90000 origins [ 444.667650][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 444.676408][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.686456][T12617] Call Trace: [ 444.689747][T12617] dump_stack+0x24c/0x2e0 [ 444.694074][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 444.699788][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 444.705587][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 444.711653][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 444.716492][T12617] ? kmsan_get_metadata+0x116/0x180 [ 444.721688][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 444.727480][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 444.733634][T12617] ? kmsan_get_metadata+0x116/0x180 [ 444.738862][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 444.745523][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 444.751638][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 444.756928][T12617] ? _copy_from_user+0x1fd/0x300 [ 444.762296][T12617] __msan_chain_origin+0x54/0xa0 [ 444.767247][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.772501][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.777450][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.781955][T12617] ? kmsan_get_metadata+0x116/0x180 [ 444.787147][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 444.794681][T12617] ? kmsan_get_metadata+0x116/0x180 [ 444.799869][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 444.805490][T12617] ? __msan_poison_alloca+0xec/0x110 [ 444.810758][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 444.815782][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.820453][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.826609][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.832766][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.837964][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.842832][T12617] do_SYSENTER_32+0x73/0x90 [ 444.847331][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.853660][T12617] RIP: 0023:0xf7fe3549 [ 444.857720][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 444.879053][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 444.887469][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 444.895440][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 444.903515][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.911481][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 444.919455][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.927446][T12617] Uninit was stored to memory at: [ 444.932450][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 444.938177][T12617] __msan_chain_origin+0x54/0xa0 [ 444.943109][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 444.948218][T12617] get_compat_msghdr+0x108/0x2b0 [ 444.953162][T12617] do_recvmmsg+0xdc1/0x22d0 [ 444.957660][T12617] __sys_recvmmsg+0x519/0x6f0 [ 444.962326][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 444.968379][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 444.974521][T12617] __do_fast_syscall_32+0x127/0x180 [ 444.979710][T12617] do_fast_syscall_32+0x6a/0xc0 [ 444.984557][T12617] do_SYSENTER_32+0x73/0x90 [ 444.989099][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 444.995445][T12617] [ 444.997760][T12617] Uninit was stored to memory at: [ 445.002784][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.008524][T12617] __msan_chain_origin+0x54/0xa0 [ 445.013450][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.018561][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.023485][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.028001][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.032684][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.038745][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.044898][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.050138][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.054979][T12617] do_SYSENTER_32+0x73/0x90 [ 445.059471][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.065788][T12617] [ 445.068112][T12617] Uninit was stored to memory at: [ 445.073109][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.078816][T12617] __msan_chain_origin+0x54/0xa0 [ 445.083740][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.088838][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.093763][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.098268][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.102943][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.109454][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.115759][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.121103][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.126070][T12617] do_SYSENTER_32+0x73/0x90 [ 445.131763][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.138848][T12617] [ 445.141166][T12617] Uninit was stored to memory at: [ 445.146173][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.151945][T12617] __msan_chain_origin+0x54/0xa0 [ 445.156895][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.162225][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.167180][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.171676][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.176478][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.182552][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.188714][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.193935][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.198779][T12617] do_SYSENTER_32+0x73/0x90 [ 445.203279][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.209606][T12617] [ 445.211935][T12617] Uninit was stored to memory at: [ 445.216940][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.222651][T12617] __msan_chain_origin+0x54/0xa0 [ 445.227578][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.232690][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.237619][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.242113][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.246781][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.253046][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.259437][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.264645][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.269491][T12617] do_SYSENTER_32+0x73/0x90 [ 445.274248][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.280572][T12617] [ 445.282880][T12617] Uninit was stored to memory at: [ 445.287879][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.293606][T12617] __msan_chain_origin+0x54/0xa0 [ 445.298530][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.303628][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.308552][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.313062][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.317723][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.323793][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.330037][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.335224][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.340083][T12617] do_SYSENTER_32+0x73/0x90 [ 445.344571][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.350892][T12617] [ 445.353214][T12617] Uninit was stored to memory at: [ 445.358246][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.363955][T12617] __msan_chain_origin+0x54/0xa0 [ 445.368894][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.373990][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.379037][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.383543][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.388439][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.394506][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.400794][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.406004][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.410852][T12617] do_SYSENTER_32+0x73/0x90 [ 445.415356][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.421676][T12617] [ 445.424002][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 445.430766][T12617] do_recvmmsg+0xbf/0x22d0 [ 445.435176][T12617] do_recvmmsg+0xbf/0x22d0 [ 445.653630][T12617] not chained 100000 origins [ 445.658259][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 445.667058][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.677121][T12617] Call Trace: [ 445.680405][T12617] dump_stack+0x24c/0x2e0 [ 445.684735][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 445.690468][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.696286][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 445.702359][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 445.707120][T12617] ? kmsan_get_metadata+0x116/0x180 [ 445.712322][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.718134][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 445.724200][T12617] ? kmsan_get_metadata+0x116/0x180 [ 445.729396][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 445.735020][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 445.741078][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 445.746353][T12617] ? _copy_from_user+0x1fd/0x300 [ 445.751298][T12617] __msan_chain_origin+0x54/0xa0 [ 445.756222][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.761353][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.766323][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.770822][T12617] ? kmsan_get_metadata+0x116/0x180 [ 445.776009][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 445.781802][T12617] ? kmsan_get_metadata+0x116/0x180 [ 445.786994][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 445.792691][T12617] ? __msan_poison_alloca+0xec/0x110 [ 445.797989][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 445.802762][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.807465][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.813533][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.819679][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.824869][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.829709][T12617] do_SYSENTER_32+0x73/0x90 [ 445.834201][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.840534][T12617] RIP: 0023:0xf7fe3549 [ 445.846065][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 445.865688][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 445.874103][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 445.882084][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 445.890055][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.898012][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 445.905969][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.913928][T12617] Uninit was stored to memory at: [ 445.918941][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.924652][T12617] __msan_chain_origin+0x54/0xa0 [ 445.929580][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 445.934694][T12617] get_compat_msghdr+0x108/0x2b0 [ 445.939616][T12617] do_recvmmsg+0xdc1/0x22d0 [ 445.944113][T12617] __sys_recvmmsg+0x519/0x6f0 [ 445.948810][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 445.954874][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 445.961041][T12617] __do_fast_syscall_32+0x127/0x180 [ 445.966228][T12617] do_fast_syscall_32+0x6a/0xc0 [ 445.971084][T12617] do_SYSENTER_32+0x73/0x90 [ 445.975574][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 445.981888][T12617] [ 445.984217][T12617] Uninit was stored to memory at: [ 445.989225][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 445.994929][T12617] __msan_chain_origin+0x54/0xa0 [ 445.999883][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.004981][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.009918][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.014408][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.019076][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.025148][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.031326][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.036543][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.041387][T12617] do_SYSENTER_32+0x73/0x90 [ 446.045920][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.052247][T12617] [ 446.054558][T12617] Uninit was stored to memory at: [ 446.059557][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.065265][T12617] __msan_chain_origin+0x54/0xa0 [ 446.070217][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.075348][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.080289][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.084780][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.089525][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.095612][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.102005][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.107231][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.112331][T12617] do_SYSENTER_32+0x73/0x90 [ 446.117916][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.125043][T12617] [ 446.127975][T12617] Uninit was stored to memory at: [ 446.134209][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.143243][T12617] __msan_chain_origin+0x54/0xa0 [ 446.148470][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.153654][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.158592][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.163088][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.167758][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.173823][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.179972][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.185165][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.190010][T12617] do_SYSENTER_32+0x73/0x90 [ 446.194510][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.200923][T12617] [ 446.203235][T12617] Uninit was stored to memory at: [ 446.208498][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.214267][T12617] __msan_chain_origin+0x54/0xa0 [ 446.219232][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.224364][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.229324][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.233972][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.238780][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.244934][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.251099][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.256298][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.261155][T12617] do_SYSENTER_32+0x73/0x90 [ 446.265649][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.271971][T12617] [ 446.274294][T12617] Uninit was stored to memory at: [ 446.279310][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.285035][T12617] __msan_chain_origin+0x54/0xa0 [ 446.289974][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.295105][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.300029][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.304536][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.309198][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.315254][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.321404][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.326604][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.331458][T12617] do_SYSENTER_32+0x73/0x90 [ 446.335945][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.342281][T12617] [ 446.344603][T12617] Uninit was stored to memory at: [ 446.349603][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.355308][T12617] __msan_chain_origin+0x54/0xa0 [ 446.360247][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.365343][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.370412][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.374918][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.379618][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.385813][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.391979][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.397185][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.402057][T12617] do_SYSENTER_32+0x73/0x90 [ 446.406570][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.412893][T12617] [ 446.415207][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 446.421860][T12617] do_recvmmsg+0xbf/0x22d0 [ 446.426284][T12617] do_recvmmsg+0xbf/0x22d0 [ 446.651013][T12617] not chained 110000 origins [ 446.655815][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 446.664603][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.674782][T12617] Call Trace: [ 446.678069][T12617] dump_stack+0x24c/0x2e0 [ 446.682400][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 446.688162][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 446.693966][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 446.700022][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 446.704784][T12617] ? kmsan_get_metadata+0x116/0x180 [ 446.710001][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 446.715811][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 446.721866][T12617] ? kmsan_get_metadata+0x116/0x180 [ 446.727059][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 446.732718][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 446.738792][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 446.744075][T12617] ? _copy_from_user+0x1fd/0x300 [ 446.749008][T12617] __msan_chain_origin+0x54/0xa0 [ 446.753944][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.759052][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.763981][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.768504][T12617] ? kmsan_get_metadata+0x116/0x180 [ 446.773695][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 446.779489][T12617] ? kmsan_get_metadata+0x116/0x180 [ 446.784683][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 446.790349][T12617] ? __msan_poison_alloca+0xec/0x110 [ 446.795627][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 446.800379][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.805053][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.811142][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.817303][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.822520][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.827364][T12617] do_SYSENTER_32+0x73/0x90 [ 446.831873][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.838190][T12617] RIP: 0023:0xf7fe3549 [ 446.842245][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 446.861844][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 446.870259][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 446.878227][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 446.886220][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.894232][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 446.902196][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.910184][T12617] Uninit was stored to memory at: [ 446.915191][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.920926][T12617] __msan_chain_origin+0x54/0xa0 [ 446.925853][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 446.930991][T12617] get_compat_msghdr+0x108/0x2b0 [ 446.935914][T12617] do_recvmmsg+0xdc1/0x22d0 [ 446.940404][T12617] __sys_recvmmsg+0x519/0x6f0 [ 446.945071][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 446.951153][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 446.957297][T12617] __do_fast_syscall_32+0x127/0x180 [ 446.962486][T12617] do_fast_syscall_32+0x6a/0xc0 [ 446.967324][T12617] do_SYSENTER_32+0x73/0x90 [ 446.971855][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 446.978172][T12617] [ 446.980478][T12617] Uninit was stored to memory at: [ 446.985481][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 446.991217][T12617] __msan_chain_origin+0x54/0xa0 [ 446.996165][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.001279][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.006239][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.010773][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.015441][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.021499][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.027659][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.032846][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.037683][T12617] do_SYSENTER_32+0x73/0x90 [ 447.042173][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.048489][T12617] [ 447.050811][T12617] Uninit was stored to memory at: [ 447.055813][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.061526][T12617] __msan_chain_origin+0x54/0xa0 [ 447.066452][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.071575][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.076502][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.080991][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.085656][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.091745][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.097943][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.103316][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.108515][T12617] do_SYSENTER_32+0x73/0x90 [ 447.114943][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.122114][T12617] [ 447.124432][T12617] Uninit was stored to memory at: [ 447.129622][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.135468][T12617] __msan_chain_origin+0x54/0xa0 [ 447.140433][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.145540][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.150496][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.155018][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.159687][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.165747][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.171921][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.177134][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.181981][T12617] do_SYSENTER_32+0x73/0x90 [ 447.186476][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.192836][T12617] [ 447.195167][T12617] Uninit was stored to memory at: [ 447.200184][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.205904][T12617] __msan_chain_origin+0x54/0xa0 [ 447.210859][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.215978][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.220905][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.225409][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.230114][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.236174][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.242328][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.247557][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.252429][T12617] do_SYSENTER_32+0x73/0x90 [ 447.256923][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.263272][T12617] [ 447.265586][T12617] Uninit was stored to memory at: [ 447.270619][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.276425][T12617] __msan_chain_origin+0x54/0xa0 [ 447.281351][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.286462][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.291433][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.295951][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.300644][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.306714][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.312897][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.318089][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.322929][T12617] do_SYSENTER_32+0x73/0x90 [ 447.327424][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.333771][T12617] [ 447.336108][T12617] Uninit was stored to memory at: [ 447.341108][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.346820][T12617] __msan_chain_origin+0x54/0xa0 [ 447.351785][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.356905][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.361828][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.366323][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.371012][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.377067][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.383209][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.388401][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.398206][T12617] do_SYSENTER_32+0x73/0x90 [ 447.402736][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.409068][T12617] [ 447.411401][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 447.418049][T12617] do_recvmmsg+0xbf/0x22d0 [ 447.422458][T12617] do_recvmmsg+0xbf/0x22d0 [ 447.636737][T12617] not chained 120000 origins [ 447.641361][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 447.650121][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.660163][T12617] Call Trace: [ 447.663432][T12617] dump_stack+0x24c/0x2e0 [ 447.667758][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 447.673472][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 447.679262][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 447.685317][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 447.690110][T12617] ? kmsan_get_metadata+0x116/0x180 [ 447.695307][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 447.701139][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 447.707230][T12617] ? kmsan_get_metadata+0x116/0x180 [ 447.712447][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 447.718071][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 447.724125][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 447.729396][T12617] ? _copy_from_user+0x1fd/0x300 [ 447.734327][T12617] __msan_chain_origin+0x54/0xa0 [ 447.739272][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.744383][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.749352][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.753847][T12617] ? kmsan_get_metadata+0x116/0x180 [ 447.759032][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 447.764830][T12617] ? kmsan_get_metadata+0x116/0x180 [ 447.770070][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 447.775709][T12617] ? __msan_poison_alloca+0xec/0x110 [ 447.780996][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 447.785759][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.790467][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.796535][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.802776][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.807980][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.812982][T12617] do_SYSENTER_32+0x73/0x90 [ 447.817480][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.823801][T12617] RIP: 0023:0xf7fe3549 [ 447.827865][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 447.847489][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 447.855899][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 447.863864][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 447.871842][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.879808][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 447.887786][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.895756][T12617] Uninit was stored to memory at: [ 447.900786][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.906501][T12617] __msan_chain_origin+0x54/0xa0 [ 447.911456][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.916584][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.921511][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.926010][T12617] __sys_recvmmsg+0x519/0x6f0 [ 447.930717][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 447.936789][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 447.942940][T12617] __do_fast_syscall_32+0x127/0x180 [ 447.948134][T12617] do_fast_syscall_32+0x6a/0xc0 [ 447.952984][T12617] do_SYSENTER_32+0x73/0x90 [ 447.957489][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 447.963813][T12617] [ 447.966123][T12617] Uninit was stored to memory at: [ 447.971138][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 447.976847][T12617] __msan_chain_origin+0x54/0xa0 [ 447.981792][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 447.986895][T12617] get_compat_msghdr+0x108/0x2b0 [ 447.991862][T12617] do_recvmmsg+0xdc1/0x22d0 [ 447.996353][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.001018][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.007075][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.013268][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.018487][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.023329][T12617] do_SYSENTER_32+0x73/0x90 [ 448.027842][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.034163][T12617] [ 448.036468][T12617] Uninit was stored to memory at: [ 448.041468][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.047180][T12617] __msan_chain_origin+0x54/0xa0 [ 448.052127][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.057245][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.062170][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.066665][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.071375][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.077434][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.083589][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.088783][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.093652][T12617] do_SYSENTER_32+0x73/0x90 [ 448.098157][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.104721][T12617] [ 448.107177][T12617] Uninit was stored to memory at: [ 448.112212][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.117966][T12617] __msan_chain_origin+0x54/0xa0 [ 448.123169][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.128292][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.133753][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.138277][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.142947][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.149026][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.155179][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.160376][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.165239][T12617] do_SYSENTER_32+0x73/0x90 [ 448.169772][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.176098][T12617] [ 448.178425][T12617] Uninit was stored to memory at: [ 448.183455][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.189179][T12617] __msan_chain_origin+0x54/0xa0 [ 448.194122][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.199254][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.204185][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.208681][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.213357][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.219435][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.225627][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.230864][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.235730][T12617] do_SYSENTER_32+0x73/0x90 [ 448.240257][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.246585][T12617] [ 448.248921][T12617] Uninit was stored to memory at: [ 448.253959][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.259672][T12617] __msan_chain_origin+0x54/0xa0 [ 448.264610][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.269800][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.274735][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.279237][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.283912][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.289980][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.296138][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.301334][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.306176][T12617] do_SYSENTER_32+0x73/0x90 [ 448.310698][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.317046][T12617] [ 448.319355][T12617] Uninit was stored to memory at: [ 448.324372][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.330139][T12617] __msan_chain_origin+0x54/0xa0 [ 448.335066][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.340182][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.345110][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.349645][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.354368][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.360449][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.366598][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.371813][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.376681][T12617] do_SYSENTER_32+0x73/0x90 [ 448.381175][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.387497][T12617] [ 448.389821][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 448.396470][T12617] do_recvmmsg+0xbf/0x22d0 [ 448.400875][T12617] do_recvmmsg+0xbf/0x22d0 [ 448.440934][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.447504][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.687249][T12617] not chained 130000 origins [ 448.692026][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 448.700779][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.710826][T12617] Call Trace: [ 448.714095][T12617] dump_stack+0x24c/0x2e0 [ 448.718435][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 448.724141][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 448.729939][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 448.736022][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 448.740778][T12617] ? kmsan_get_metadata+0x116/0x180 [ 448.746011][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 448.751817][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 448.757884][T12617] ? kmsan_get_metadata+0x116/0x180 [ 448.763079][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 448.768706][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 448.774783][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 448.780057][T12617] ? _copy_from_user+0x1fd/0x300 [ 448.784985][T12617] __msan_chain_origin+0x54/0xa0 [ 448.789927][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.795028][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.799969][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.804464][T12617] ? kmsan_get_metadata+0x116/0x180 [ 448.809649][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 448.815444][T12617] ? kmsan_get_metadata+0x116/0x180 [ 448.820626][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 448.826243][T12617] ? __msan_poison_alloca+0xec/0x110 [ 448.831518][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 448.836302][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.840985][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.847088][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.853269][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.858471][T12617] do_fast_syscall_32+0x6a/0xc0 [ 448.863320][T12617] do_SYSENTER_32+0x73/0x90 [ 448.867827][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 448.874153][T12617] RIP: 0023:0xf7fe3549 [ 448.878212][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 448.897811][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 448.906231][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 448.914201][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 448.922175][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.930130][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 448.938103][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.946071][T12617] Uninit was stored to memory at: [ 448.951069][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 448.956780][T12617] __msan_chain_origin+0x54/0xa0 [ 448.961705][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 448.966803][T12617] get_compat_msghdr+0x108/0x2b0 [ 448.971737][T12617] do_recvmmsg+0xdc1/0x22d0 [ 448.976225][T12617] __sys_recvmmsg+0x519/0x6f0 [ 448.980996][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 448.987055][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 448.993234][T12617] __do_fast_syscall_32+0x127/0x180 [ 448.998423][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.003372][T12617] do_SYSENTER_32+0x73/0x90 [ 449.007871][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.014222][T12617] [ 449.016539][T12617] Uninit was stored to memory at: [ 449.021554][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.027269][T12617] __msan_chain_origin+0x54/0xa0 [ 449.032216][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.037356][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.042312][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.046824][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.051490][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.057544][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.063701][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.068889][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.073728][T12617] do_SYSENTER_32+0x73/0x90 [ 449.078219][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.084554][T12617] [ 449.086864][T12617] Uninit was stored to memory at: [ 449.091869][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.097698][T12617] __msan_chain_origin+0x54/0xa0 [ 449.102897][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.108013][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.113081][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.117890][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.122744][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.129781][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.137041][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.142387][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.147244][T12617] do_SYSENTER_32+0x73/0x90 [ 449.151858][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.158183][T12617] [ 449.160488][T12617] Uninit was stored to memory at: [ 449.165510][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.171244][T12617] __msan_chain_origin+0x54/0xa0 [ 449.176189][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.181300][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.186227][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.190721][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.196190][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.202347][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.208507][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.213697][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.218541][T12617] do_SYSENTER_32+0x73/0x90 [ 449.223146][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.229996][T12617] [ 449.232350][T12617] Uninit was stored to memory at: [ 449.237366][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.243344][T12617] __msan_chain_origin+0x54/0xa0 [ 449.248277][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.253391][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.258316][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.262809][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.267583][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.274594][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.280732][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.285928][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.290763][T12617] do_SYSENTER_32+0x73/0x90 [ 449.295342][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.301666][T12617] [ 449.303968][T12617] Uninit was stored to memory at: [ 449.309253][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.314960][T12617] __msan_chain_origin+0x54/0xa0 [ 449.319883][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.324981][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.331503][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.335999][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.340668][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.346754][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.353167][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.358439][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.363339][T12617] do_SYSENTER_32+0x73/0x90 [ 449.367879][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.374240][T12617] [ 449.376558][T12617] Uninit was stored to memory at: [ 449.381991][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.387722][T12617] __msan_chain_origin+0x54/0xa0 [ 449.392660][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.397767][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.402790][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.407318][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.411999][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.418061][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.424204][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.429417][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.434251][T12617] do_SYSENTER_32+0x73/0x90 [ 449.438752][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.445079][T12617] [ 449.447390][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 449.454086][T12617] do_recvmmsg+0xbf/0x22d0 [ 449.458513][T12617] do_recvmmsg+0xbf/0x22d0 [ 449.679889][T12617] not chained 140000 origins [ 449.684645][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 449.693399][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.703546][T12617] Call Trace: [ 449.706845][T12617] dump_stack+0x24c/0x2e0 [ 449.711170][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 449.716873][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 449.722681][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 449.728918][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 449.733771][T12617] ? kmsan_get_metadata+0x116/0x180 [ 449.739560][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 449.745355][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.751421][T12617] ? kmsan_get_metadata+0x116/0x180 [ 449.756720][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 449.762521][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 449.768570][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 449.773850][T12617] ? _copy_from_user+0x1fd/0x300 [ 449.778786][T12617] __msan_chain_origin+0x54/0xa0 [ 449.783766][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.788886][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.793818][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.798317][T12617] ? kmsan_get_metadata+0x116/0x180 [ 449.803606][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 449.809400][T12617] ? kmsan_get_metadata+0x116/0x180 [ 449.814597][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 449.820218][T12617] ? __msan_poison_alloca+0xec/0x110 [ 449.825489][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 449.830268][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.834939][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.841279][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.847516][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.852720][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.858517][T12617] do_SYSENTER_32+0x73/0x90 [ 449.863017][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 449.869337][T12617] RIP: 0023:0xf7fe3549 [ 449.873399][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.892992][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 449.901399][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 449.909618][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 449.917573][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.925542][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 449.933497][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.941455][T12617] Uninit was stored to memory at: [ 449.946454][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 449.952158][T12617] __msan_chain_origin+0x54/0xa0 [ 449.957077][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 449.962178][T12617] get_compat_msghdr+0x108/0x2b0 [ 449.967108][T12617] do_recvmmsg+0xdc1/0x22d0 [ 449.971597][T12617] __sys_recvmmsg+0x519/0x6f0 [ 449.976257][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 449.982308][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 449.988446][T12617] __do_fast_syscall_32+0x127/0x180 [ 449.993643][T12617] do_fast_syscall_32+0x6a/0xc0 [ 449.998659][T12617] do_SYSENTER_32+0x73/0x90 [ 450.003146][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.009464][T12617] [ 450.011794][T12617] Uninit was stored to memory at: [ 450.016797][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.022516][T12617] __msan_chain_origin+0x54/0xa0 [ 450.027444][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.032653][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.037591][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.042361][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.047472][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.053539][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.059706][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.064932][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.069778][T12617] do_SYSENTER_32+0x73/0x90 [ 450.074267][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.080585][T12617] [ 450.082889][T12617] Uninit was stored to memory at: [ 450.087883][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.093587][T12617] __msan_chain_origin+0x54/0xa0 [ 450.098509][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.104537][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.110727][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.115596][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.120658][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.127250][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.133596][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.138794][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.143686][T12617] do_SYSENTER_32+0x73/0x90 [ 450.148180][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.154501][T12617] [ 450.156807][T12617] Uninit was stored to memory at: [ 450.161806][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.167538][T12617] __msan_chain_origin+0x54/0xa0 [ 450.172476][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.177573][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.182494][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.186980][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.191641][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.197697][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.203857][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.209043][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.214000][T12617] do_SYSENTER_32+0x73/0x90 [ 450.218588][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.225255][T12617] [ 450.227569][T12617] Uninit was stored to memory at: [ 450.232790][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.238769][T12617] __msan_chain_origin+0x54/0xa0 [ 450.243748][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.248855][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.253788][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.258288][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.262957][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.269042][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.275226][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.280441][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.285291][T12617] do_SYSENTER_32+0x73/0x90 [ 450.289784][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.296121][T12617] [ 450.298428][T12617] Uninit was stored to memory at: [ 450.303444][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.309153][T12617] __msan_chain_origin+0x54/0xa0 [ 450.314085][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.319226][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.324257][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.328762][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.333429][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.339496][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.345648][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.350847][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.355689][T12617] do_SYSENTER_32+0x73/0x90 [ 450.360178][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.366495][T12617] [ 450.368806][T12617] Uninit was stored to memory at: [ 450.373822][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.379534][T12617] __msan_chain_origin+0x54/0xa0 [ 450.384459][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.389573][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.394512][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.399016][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.403677][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.409732][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.415877][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.421066][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.425920][T12617] do_SYSENTER_32+0x73/0x90 [ 450.430424][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.436746][T12617] [ 450.439062][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 450.445721][T12617] do_recvmmsg+0xbf/0x22d0 [ 450.450137][T12617] do_recvmmsg+0xbf/0x22d0 [ 450.673647][T12617] not chained 150000 origins [ 450.678280][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 450.687065][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.697125][T12617] Call Trace: [ 450.700411][T12617] dump_stack+0x24c/0x2e0 [ 450.704746][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 450.710466][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 450.716288][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 450.722367][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 450.727138][T12617] ? kmsan_get_metadata+0x116/0x180 [ 450.732349][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 450.738147][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.744225][T12617] ? kmsan_get_metadata+0x116/0x180 [ 450.749413][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 450.755036][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 450.761093][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 450.766385][T12617] ? _copy_from_user+0x1fd/0x300 [ 450.771311][T12617] __msan_chain_origin+0x54/0xa0 [ 450.776253][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.781361][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.786596][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.791096][T12617] ? kmsan_get_metadata+0x116/0x180 [ 450.796301][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 450.802104][T12617] ? kmsan_get_metadata+0x116/0x180 [ 450.807298][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 450.812930][T12617] ? __msan_poison_alloca+0xec/0x110 [ 450.818208][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 450.822968][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.827657][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.833718][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.839863][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.845073][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.850539][T12617] do_SYSENTER_32+0x73/0x90 [ 450.855046][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 450.861364][T12617] RIP: 0023:0xf7fe3549 [ 450.865425][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 450.885049][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 450.893473][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 450.901446][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 450.909406][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.917380][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 450.925353][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.933330][T12617] Uninit was stored to memory at: [ 450.938367][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 450.944182][T12617] __msan_chain_origin+0x54/0xa0 [ 450.949102][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 450.954215][T12617] get_compat_msghdr+0x108/0x2b0 [ 450.959152][T12617] do_recvmmsg+0xdc1/0x22d0 [ 450.963657][T12617] __sys_recvmmsg+0x519/0x6f0 [ 450.968318][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 450.974376][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 450.980521][T12617] __do_fast_syscall_32+0x127/0x180 [ 450.985718][T12617] do_fast_syscall_32+0x6a/0xc0 [ 450.990599][T12617] do_SYSENTER_32+0x73/0x90 [ 450.995089][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.001420][T12617] [ 451.003728][T12617] Uninit was stored to memory at: [ 451.008830][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.014540][T12617] __msan_chain_origin+0x54/0xa0 [ 451.019480][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.024577][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.029691][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.034182][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.038860][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.044934][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.051093][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.056279][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.061134][T12617] do_SYSENTER_32+0x73/0x90 [ 451.065668][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.072104][T12617] [ 451.074449][T12617] Uninit was stored to memory at: [ 451.079540][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.085263][T12617] __msan_chain_origin+0x54/0xa0 [ 451.090227][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.095337][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.100381][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.105305][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.110006][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.116082][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.122351][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.127931][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.133007][T12617] do_SYSENTER_32+0x73/0x90 [ 451.137648][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.143975][T12617] [ 451.146288][T12617] Uninit was stored to memory at: [ 451.151293][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.157025][T12617] __msan_chain_origin+0x54/0xa0 [ 451.161979][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.167079][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.172032][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.176535][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.181301][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.187375][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.193562][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.198761][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.203616][T12617] do_SYSENTER_32+0x73/0x90 [ 451.208138][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.214489][T12617] [ 451.216822][T12617] Uninit was stored to memory at: [ 451.221843][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.227557][T12617] __msan_chain_origin+0x54/0xa0 [ 451.232536][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.237697][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.242640][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.247275][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.252052][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.258154][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.264338][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.269577][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.274425][T12617] do_SYSENTER_32+0x73/0x90 [ 451.278942][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.285267][T12617] [ 451.287586][T12617] Uninit was stored to memory at: [ 451.292596][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.298330][T12617] __msan_chain_origin+0x54/0xa0 [ 451.303263][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.308467][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.313640][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.318251][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.322925][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.328987][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.335145][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.340357][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.345197][T12617] do_SYSENTER_32+0x73/0x90 [ 451.349686][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.356091][T12617] [ 451.358399][T12617] Uninit was stored to memory at: [ 451.363399][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.369227][T12617] __msan_chain_origin+0x54/0xa0 [ 451.374149][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.379255][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.384182][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.388677][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.393346][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.399435][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.405596][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.411043][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.415886][T12617] do_SYSENTER_32+0x73/0x90 [ 451.420392][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.426713][T12617] [ 451.429031][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 451.435689][T12617] do_recvmmsg+0xbf/0x22d0 [ 451.440107][T12617] do_recvmmsg+0xbf/0x22d0 [ 451.690271][T12617] not chained 160000 origins [ 451.694945][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 451.703735][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.713910][T12617] Call Trace: [ 451.717188][T12617] dump_stack+0x24c/0x2e0 [ 451.721625][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 451.727360][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 451.733163][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 451.739252][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 451.744030][T12617] ? kmsan_get_metadata+0x116/0x180 [ 451.749218][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 451.755020][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.761076][T12617] ? kmsan_get_metadata+0x116/0x180 [ 451.766277][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 451.771914][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 451.777965][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 451.783236][T12617] ? _copy_from_user+0x1fd/0x300 [ 451.788179][T12617] __msan_chain_origin+0x54/0xa0 [ 451.793112][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.798213][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.803146][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.807649][T12617] ? kmsan_get_metadata+0x116/0x180 [ 451.812836][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 451.818633][T12617] ? kmsan_get_metadata+0x116/0x180 [ 451.823823][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 451.829444][T12617] ? __msan_poison_alloca+0xec/0x110 [ 451.834803][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 451.839560][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.844249][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.850326][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.856512][T12617] __do_fast_syscall_32+0x127/0x180 [ 451.861735][T12617] do_fast_syscall_32+0x6a/0xc0 [ 451.866590][T12617] do_SYSENTER_32+0x73/0x90 [ 451.871224][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 451.877584][T12617] RIP: 0023:0xf7fe3549 [ 451.881662][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 451.901271][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 451.910653][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 451.918649][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 451.926621][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.934605][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 451.942567][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.950565][T12617] Uninit was stored to memory at: [ 451.955591][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 451.961311][T12617] __msan_chain_origin+0x54/0xa0 [ 451.966280][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 451.971402][T12617] get_compat_msghdr+0x108/0x2b0 [ 451.976336][T12617] do_recvmmsg+0xdc1/0x22d0 [ 451.980848][T12617] __sys_recvmmsg+0x519/0x6f0 [ 451.985516][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 451.991575][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 451.997718][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.002906][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.007778][T12617] do_SYSENTER_32+0x73/0x90 [ 452.012290][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.018841][T12617] [ 452.021269][T12617] Uninit was stored to memory at: [ 452.026277][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.031998][T12617] __msan_chain_origin+0x54/0xa0 [ 452.036937][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.042047][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.046975][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.051470][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.056135][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.062222][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.068473][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.073681][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.078527][T12617] do_SYSENTER_32+0x73/0x90 [ 452.083026][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.089351][T12617] [ 452.091676][T12617] Uninit was stored to memory at: [ 452.096680][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.102387][T12617] __msan_chain_origin+0x54/0xa0 [ 452.108057][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.113483][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.118464][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.123520][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.128845][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.134961][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.141347][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.146593][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.151451][T12617] do_SYSENTER_32+0x73/0x90 [ 452.155959][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.162296][T12617] [ 452.164621][T12617] Uninit was stored to memory at: [ 452.169636][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.175344][T12617] __msan_chain_origin+0x54/0xa0 [ 452.180393][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.185525][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.190484][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.195031][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.199702][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.205763][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.211968][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.217212][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.222063][T12617] do_SYSENTER_32+0x73/0x90 [ 452.226558][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.232891][T12617] [ 452.235198][T12617] Uninit was stored to memory at: [ 452.240218][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.246108][T12617] __msan_chain_origin+0x54/0xa0 [ 452.251231][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.256488][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.261907][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.266444][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.271367][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.277433][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.283579][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.288787][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.293629][T12617] do_SYSENTER_32+0x73/0x90 [ 452.298126][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.304464][T12617] [ 452.306773][T12617] Uninit was stored to memory at: [ 452.311771][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.317483][T12617] __msan_chain_origin+0x54/0xa0 [ 452.322433][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.327546][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.332469][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.336956][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.341617][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.347671][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.353828][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.359017][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.363871][T12617] do_SYSENTER_32+0x73/0x90 [ 452.368375][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.374689][T12617] [ 452.377003][T12617] Uninit was stored to memory at: [ 452.382018][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.387759][T12617] __msan_chain_origin+0x54/0xa0 [ 452.392704][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.397818][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.402764][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.407255][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.412045][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.418165][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.424433][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.429780][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.434646][T12617] do_SYSENTER_32+0x73/0x90 [ 452.439138][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.445474][T12617] [ 452.447788][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 452.454455][T12617] do_recvmmsg+0xbf/0x22d0 [ 452.458865][T12617] do_recvmmsg+0xbf/0x22d0 [ 452.699513][T12617] not chained 170000 origins [ 452.704166][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 452.712915][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.722964][T12617] Call Trace: [ 452.726248][T12617] dump_stack+0x24c/0x2e0 [ 452.730636][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 452.736354][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 452.742152][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 452.748222][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 452.753000][T12617] ? kmsan_get_metadata+0x116/0x180 [ 452.758214][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 452.764009][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 452.770089][T12617] ? kmsan_get_metadata+0x116/0x180 [ 452.775288][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 452.780917][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 452.786974][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 452.792257][T12617] ? _copy_from_user+0x1fd/0x300 [ 452.797201][T12617] __msan_chain_origin+0x54/0xa0 [ 452.802133][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.807236][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.812164][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.816659][T12617] ? kmsan_get_metadata+0x116/0x180 [ 452.821865][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 452.827674][T12617] ? kmsan_get_metadata+0x116/0x180 [ 452.832870][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 452.838498][T12617] ? __msan_poison_alloca+0xec/0x110 [ 452.843794][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 452.848568][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.853255][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 452.859315][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 452.865487][T12617] __do_fast_syscall_32+0x127/0x180 [ 452.870693][T12617] do_fast_syscall_32+0x6a/0xc0 [ 452.875536][T12617] do_SYSENTER_32+0x73/0x90 [ 452.880045][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 452.886378][T12617] RIP: 0023:0xf7fe3549 [ 452.890431][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 452.910227][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 452.918908][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 452.926886][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 452.934902][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.942887][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 452.951974][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.959941][T12617] Uninit was stored to memory at: [ 452.965058][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 452.970769][T12617] __msan_chain_origin+0x54/0xa0 [ 452.975842][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 452.980950][T12617] get_compat_msghdr+0x108/0x2b0 [ 452.985900][T12617] do_recvmmsg+0xdc1/0x22d0 [ 452.990403][T12617] __sys_recvmmsg+0x519/0x6f0 [ 452.995099][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.001160][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.007314][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.012541][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.017379][T12617] do_SYSENTER_32+0x73/0x90 [ 453.021874][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.028215][T12617] [ 453.030532][T12617] Uninit was stored to memory at: [ 453.035549][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.041269][T12617] __msan_chain_origin+0x54/0xa0 [ 453.046193][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.051308][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.056236][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.060728][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.065393][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.071480][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.077621][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.082825][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.087681][T12617] do_SYSENTER_32+0x73/0x90 [ 453.092192][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.098527][T12617] [ 453.100919][T12617] Uninit was stored to memory at: [ 453.107355][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.115209][T12617] __msan_chain_origin+0x54/0xa0 [ 453.120476][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.127642][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.132695][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.137523][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.142808][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.148903][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.155061][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.160348][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.165354][T12617] do_SYSENTER_32+0x73/0x90 [ 453.169861][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.176192][T12617] [ 453.178512][T12617] Uninit was stored to memory at: [ 453.183512][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.189222][T12617] __msan_chain_origin+0x54/0xa0 [ 453.194147][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.199262][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.204304][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.209131][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.214004][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.220080][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.226243][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.231463][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.236313][T12617] do_SYSENTER_32+0x73/0x90 [ 453.240841][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.247162][T12617] [ 453.249478][T12617] Uninit was stored to memory at: [ 453.254642][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.260489][T12617] __msan_chain_origin+0x54/0xa0 [ 453.265423][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.270543][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.275524][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.280243][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.284929][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.290997][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.297150][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.302347][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.307298][T12617] do_SYSENTER_32+0x73/0x90 [ 453.311911][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.318245][T12617] [ 453.320568][T12617] Uninit was stored to memory at: [ 453.325573][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.331303][T12617] __msan_chain_origin+0x54/0xa0 [ 453.336237][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.341345][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.346296][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.350792][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.355461][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.361536][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.367677][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.372866][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.377717][T12617] do_SYSENTER_32+0x73/0x90 [ 453.382221][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.388558][T12617] [ 453.390863][T12617] Uninit was stored to memory at: [ 453.395865][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.401588][T12617] __msan_chain_origin+0x54/0xa0 [ 453.406583][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.411696][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.416699][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.421307][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.425985][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.432066][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.438397][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.443611][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.448472][T12617] do_SYSENTER_32+0x73/0x90 [ 453.452981][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.459361][T12617] [ 453.461673][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 453.468331][T12617] do_recvmmsg+0xbf/0x22d0 [ 453.472763][T12617] do_recvmmsg+0xbf/0x22d0 [ 453.697583][T12617] not chained 180000 origins [ 453.702225][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 453.711021][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.721074][T12617] Call Trace: [ 453.724368][T12617] dump_stack+0x24c/0x2e0 [ 453.728699][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 453.734421][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 453.740240][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 453.746313][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 453.751112][T12617] ? kmsan_get_metadata+0x116/0x180 [ 453.756327][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 453.762125][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 453.768203][T12617] ? kmsan_get_metadata+0x116/0x180 [ 453.773396][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 453.779037][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 453.785111][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 453.790389][T12617] ? _copy_from_user+0x1fd/0x300 [ 453.795315][T12617] __msan_chain_origin+0x54/0xa0 [ 453.800242][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.805362][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.810291][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.814805][T12617] ? kmsan_get_metadata+0x116/0x180 [ 453.820014][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 453.825818][T12617] ? kmsan_get_metadata+0x116/0x180 [ 453.831013][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 453.836641][T12617] ? __msan_poison_alloca+0xec/0x110 [ 453.841941][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 453.846732][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.851430][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.857496][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 453.863645][T12617] __do_fast_syscall_32+0x127/0x180 [ 453.868838][T12617] do_fast_syscall_32+0x6a/0xc0 [ 453.873679][T12617] do_SYSENTER_32+0x73/0x90 [ 453.878180][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 453.884503][T12617] RIP: 0023:0xf7fe3549 [ 453.888570][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 453.908181][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 453.916587][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 453.924575][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 453.932549][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.940504][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 453.948601][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.956577][T12617] Uninit was stored to memory at: [ 453.961584][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 453.967298][T12617] __msan_chain_origin+0x54/0xa0 [ 453.972363][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 453.977472][T12617] get_compat_msghdr+0x108/0x2b0 [ 453.982418][T12617] do_recvmmsg+0xdc1/0x22d0 [ 453.986916][T12617] __sys_recvmmsg+0x519/0x6f0 [ 453.991590][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 453.997666][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.003826][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.009018][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.013855][T12617] do_SYSENTER_32+0x73/0x90 [ 454.018352][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.024670][T12617] [ 454.026990][T12617] Uninit was stored to memory at: [ 454.032002][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.037705][T12617] __msan_chain_origin+0x54/0xa0 [ 454.042626][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.047739][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.052677][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.057170][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.061858][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.068020][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.074184][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.079375][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.084217][T12617] do_SYSENTER_32+0x73/0x90 [ 454.088714][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.095042][T12617] [ 454.097368][T12617] Uninit was stored to memory at: [ 454.102385][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.108401][T12617] __msan_chain_origin+0x54/0xa0 [ 454.114343][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.121808][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.127919][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.132439][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.138300][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.144941][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.151105][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.156300][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.161193][T12617] do_SYSENTER_32+0x73/0x90 [ 454.165706][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.172031][T12617] [ 454.174343][T12617] Uninit was stored to memory at: [ 454.179360][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.185073][T12617] __msan_chain_origin+0x54/0xa0 [ 454.190011][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.195126][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.200153][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.204661][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.209322][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.215376][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.221518][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.226945][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.231800][T12617] do_SYSENTER_32+0x73/0x90 [ 454.236291][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.242616][T12617] [ 454.244946][T12617] Uninit was stored to memory at: [ 454.249963][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.255691][T12617] __msan_chain_origin+0x54/0xa0 [ 454.260619][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.265729][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.270655][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.275167][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.279831][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.285900][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.292062][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.297249][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.302087][T12617] do_SYSENTER_32+0x73/0x90 [ 454.306592][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.312906][T12617] [ 454.315226][T12617] Uninit was stored to memory at: [ 454.320239][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.326046][T12617] __msan_chain_origin+0x54/0xa0 [ 454.330970][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.336079][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.341006][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.345493][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.350160][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.356214][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.362360][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.367579][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.372420][T12617] do_SYSENTER_32+0x73/0x90 [ 454.376911][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.383242][T12617] [ 454.385545][T12617] Uninit was stored to memory at: [ 454.390559][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.396268][T12617] __msan_chain_origin+0x54/0xa0 [ 454.401201][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.406315][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.411368][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.415942][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.420677][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.426742][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.432893][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.438091][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.442929][T12617] do_SYSENTER_32+0x73/0x90 [ 454.447437][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.453770][T12617] [ 454.456076][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 454.462753][T12617] do_recvmmsg+0xbf/0x22d0 [ 454.467197][T12617] do_recvmmsg+0xbf/0x22d0 [ 454.684674][T12617] not chained 190000 origins [ 454.689319][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 454.698084][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.708144][T12617] Call Trace: [ 454.711418][T12617] dump_stack+0x24c/0x2e0 [ 454.715772][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 454.721480][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 454.727273][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 454.733328][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 454.738096][T12617] ? kmsan_get_metadata+0x116/0x180 [ 454.743282][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 454.749093][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 454.755264][T12617] ? kmsan_get_metadata+0x116/0x180 [ 454.760448][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 454.766079][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 454.772141][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 454.777558][T12617] ? _copy_from_user+0x1fd/0x300 [ 454.782499][T12617] __msan_chain_origin+0x54/0xa0 [ 454.787449][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.792557][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.797488][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.801991][T12617] ? kmsan_get_metadata+0x116/0x180 [ 454.807198][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 454.812993][T12617] ? kmsan_get_metadata+0x116/0x180 [ 454.818196][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 454.823832][T12617] ? __msan_poison_alloca+0xec/0x110 [ 454.829119][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 454.833891][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.838576][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.844632][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.850774][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.855963][T12617] do_fast_syscall_32+0x6a/0xc0 [ 454.860828][T12617] do_SYSENTER_32+0x73/0x90 [ 454.865338][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 454.871675][T12617] RIP: 0023:0xf7fe3549 [ 454.875728][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 454.895333][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 454.903756][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 454.911723][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 454.919700][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.927683][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 454.935651][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.943617][T12617] Uninit was stored to memory at: [ 454.948656][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 454.954370][T12617] __msan_chain_origin+0x54/0xa0 [ 454.959406][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 454.964517][T12617] get_compat_msghdr+0x108/0x2b0 [ 454.969450][T12617] do_recvmmsg+0xdc1/0x22d0 [ 454.973967][T12617] __sys_recvmmsg+0x519/0x6f0 [ 454.978641][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 454.984728][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 454.990892][T12617] __do_fast_syscall_32+0x127/0x180 [ 454.996082][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.000940][T12617] do_SYSENTER_32+0x73/0x90 [ 455.005449][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.011785][T12617] [ 455.014090][T12617] Uninit was stored to memory at: [ 455.019086][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.024793][T12617] __msan_chain_origin+0x54/0xa0 [ 455.029728][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.034829][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.039752][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.044246][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.048909][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.054981][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.061123][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.066326][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.071167][T12617] do_SYSENTER_32+0x73/0x90 [ 455.075669][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.082010][T12617] [ 455.084325][T12617] Uninit was stored to memory at: [ 455.089351][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.095060][T12617] __msan_chain_origin+0x54/0xa0 [ 455.099997][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.105124][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.110374][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.115560][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.120400][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.127261][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.134148][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.140155][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.145013][T12617] do_SYSENTER_32+0x73/0x90 [ 455.149520][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.155857][T12617] [ 455.158174][T12617] Uninit was stored to memory at: [ 455.163175][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.168906][T12617] __msan_chain_origin+0x54/0xa0 [ 455.173847][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.178951][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.183879][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.188385][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.193077][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.199261][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.205419][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.210616][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.215522][T12617] do_SYSENTER_32+0x73/0x90 [ 455.220034][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.226377][T12617] [ 455.228704][T12617] Uninit was stored to memory at: [ 455.233721][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.239431][T12617] __msan_chain_origin+0x54/0xa0 [ 455.244357][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.249472][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.254399][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.258891][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.263570][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.269639][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.275784][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.280987][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.285827][T12617] do_SYSENTER_32+0x73/0x90 [ 455.290333][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.296651][T12617] [ 455.298956][T12617] Uninit was stored to memory at: [ 455.303952][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.309677][T12617] __msan_chain_origin+0x54/0xa0 [ 455.314621][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.319720][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.324642][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.329139][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.333814][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.339872][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.346013][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.351224][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.356061][T12617] do_SYSENTER_32+0x73/0x90 [ 455.360567][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.366897][T12617] [ 455.369290][T12617] Uninit was stored to memory at: [ 455.374301][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.380047][T12617] __msan_chain_origin+0x54/0xa0 [ 455.385011][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.390142][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.395076][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.399569][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.404246][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.410309][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.416487][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.421856][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.426754][T12617] do_SYSENTER_32+0x73/0x90 [ 455.431273][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.437619][T12617] [ 455.439946][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 455.446596][T12617] do_recvmmsg+0xbf/0x22d0 [ 455.451016][T12617] do_recvmmsg+0xbf/0x22d0 [ 455.661660][T12617] not chained 200000 origins [ 455.666309][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 455.675232][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.685378][T12617] Call Trace: [ 455.688657][T12617] dump_stack+0x24c/0x2e0 [ 455.692988][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 455.698731][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 455.704555][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 455.710610][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 455.715361][T12617] ? kmsan_get_metadata+0x116/0x180 [ 455.720560][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 455.726351][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 455.732405][T12617] ? kmsan_get_metadata+0x116/0x180 [ 455.737591][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 455.743209][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 455.749260][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 455.754532][T12617] ? _copy_from_user+0x1fd/0x300 [ 455.759480][T12617] __msan_chain_origin+0x54/0xa0 [ 455.764556][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.769707][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.774647][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.779168][T12617] ? kmsan_get_metadata+0x116/0x180 [ 455.784370][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 455.790175][T12617] ? kmsan_get_metadata+0x116/0x180 [ 455.795366][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 455.801014][T12617] ? __msan_poison_alloca+0xec/0x110 [ 455.806289][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 455.811044][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.815738][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.821802][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.827960][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.833147][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.837985][T12617] do_SYSENTER_32+0x73/0x90 [ 455.842544][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.848877][T12617] RIP: 0023:0xf7fe3549 [ 455.852950][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 455.872548][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 455.880971][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 455.888955][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 455.896919][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.904919][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 455.912900][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.921083][T12617] Uninit was stored to memory at: [ 455.926113][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 455.931833][T12617] __msan_chain_origin+0x54/0xa0 [ 455.936778][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 455.941889][T12617] get_compat_msghdr+0x108/0x2b0 [ 455.946819][T12617] do_recvmmsg+0xdc1/0x22d0 [ 455.951313][T12617] __sys_recvmmsg+0x519/0x6f0 [ 455.956760][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 455.962819][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 455.968977][T12617] __do_fast_syscall_32+0x127/0x180 [ 455.974252][T12617] do_fast_syscall_32+0x6a/0xc0 [ 455.979090][T12617] do_SYSENTER_32+0x73/0x90 [ 455.983579][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 455.989908][T12617] [ 455.992213][T12617] Uninit was stored to memory at: [ 455.997227][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.002936][T12617] __msan_chain_origin+0x54/0xa0 [ 456.007879][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.012992][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.017930][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.022422][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.027083][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.033136][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.039286][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.044488][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.049325][T12617] do_SYSENTER_32+0x73/0x90 [ 456.053818][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.060147][T12617] [ 456.062450][T12617] Uninit was stored to memory at: [ 456.067447][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.073156][T12617] __msan_chain_origin+0x54/0xa0 [ 456.078075][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.083172][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.088095][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.092585][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.097247][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.103317][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.110476][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.117736][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.122725][T12617] do_SYSENTER_32+0x73/0x90 [ 456.127677][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.135894][T12617] [ 456.138513][T12617] Uninit was stored to memory at: [ 456.148824][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.154557][T12617] __msan_chain_origin+0x54/0xa0 [ 456.159501][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.164601][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.169526][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.174017][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.178682][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.184747][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.190889][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.196086][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.200931][T12617] do_SYSENTER_32+0x73/0x90 [ 456.205431][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.211780][T12617] [ 456.214096][T12617] Uninit was stored to memory at: [ 456.219110][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.225267][T12617] __msan_chain_origin+0x54/0xa0 [ 456.230310][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.235430][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.240364][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.245065][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.249741][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.255873][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.262079][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.267582][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.272544][T12617] do_SYSENTER_32+0x73/0x90 [ 456.277109][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.283526][T12617] [ 456.285846][T12617] Uninit was stored to memory at: [ 456.290851][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.296625][T12617] __msan_chain_origin+0x54/0xa0 [ 456.301572][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.306687][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.311654][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.316173][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.320892][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.326959][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.333107][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.338318][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.343159][T12617] do_SYSENTER_32+0x73/0x90 [ 456.347649][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.353963][T12617] [ 456.356286][T12617] Uninit was stored to memory at: [ 456.361318][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 456.367027][T12617] __msan_chain_origin+0x54/0xa0 [ 456.371966][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.377074][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.382012][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.386498][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.391176][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.397235][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.403377][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.408566][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.413433][T12617] do_SYSENTER_32+0x73/0x90 [ 456.417946][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.424329][T12617] [ 456.426656][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 456.433310][T12617] do_recvmmsg+0xbf/0x22d0 [ 456.437784][T12617] do_recvmmsg+0xbf/0x22d0 [ 456.744839][T12617] not chained 210000 origins [ 456.749488][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 456.758239][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.768310][T12617] Call Trace: [ 456.771583][T12617] dump_stack+0x24c/0x2e0 [ 456.775926][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 456.781635][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 456.787437][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 456.793494][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 456.798266][T12617] ? kmsan_get_metadata+0x116/0x180 [ 456.803453][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 456.809257][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 456.815316][T12617] ? kmsan_get_metadata+0x116/0x180 [ 456.820523][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 456.826268][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 456.832356][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 456.837632][T12617] ? _copy_from_user+0x1fd/0x300 [ 456.842561][T12617] __msan_chain_origin+0x54/0xa0 [ 456.847496][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 456.852647][T12617] get_compat_msghdr+0x108/0x2b0 [ 456.857589][T12617] do_recvmmsg+0xdc1/0x22d0 [ 456.862087][T12617] ? kmsan_get_metadata+0x116/0x180 [ 456.867280][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 456.873116][T12617] ? kmsan_get_metadata+0x116/0x180 [ 456.878302][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 456.883922][T12617] ? __msan_poison_alloca+0xec/0x110 [ 456.889192][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 456.893962][T12617] __sys_recvmmsg+0x519/0x6f0 [ 456.898631][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 456.904697][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 456.910870][T12617] __do_fast_syscall_32+0x127/0x180 [ 456.916063][T12617] do_fast_syscall_32+0x6a/0xc0 [ 456.920907][T12617] do_SYSENTER_32+0x73/0x90 [ 456.925432][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 456.931782][T12617] RIP: 0023:0xf7fe3549 [ 456.935842][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.955445][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 456.963861][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 456.971827][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 456.979806][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.987777][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 456.995761][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.003826][T12617] Uninit was stored to memory at: [ 457.008831][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.014563][T12617] __msan_chain_origin+0x54/0xa0 [ 457.019500][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.024606][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.029562][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.034079][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.038766][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.044840][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.051010][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.056231][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.061071][T12617] do_SYSENTER_32+0x73/0x90 [ 457.065573][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.071921][T12617] [ 457.074228][T12617] Uninit was stored to memory at: [ 457.079242][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.084958][T12617] __msan_chain_origin+0x54/0xa0 [ 457.089923][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.095043][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.100165][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.105170][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.109885][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.116000][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.122574][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.128391][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.133403][T12617] do_SYSENTER_32+0x73/0x90 [ 457.138655][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.145215][T12617] [ 457.147544][T12617] Uninit was stored to memory at: [ 457.152544][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.158263][T12617] __msan_chain_origin+0x54/0xa0 [ 457.163419][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.168521][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.173465][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.177962][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.182814][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.188884][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.195053][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.200245][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.205093][T12617] do_SYSENTER_32+0x73/0x90 [ 457.209654][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.215990][T12617] [ 457.218304][T12617] Uninit was stored to memory at: [ 457.223308][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.229030][T12617] __msan_chain_origin+0x54/0xa0 [ 457.234006][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.239135][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.244092][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.248597][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.253268][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.259348][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.265502][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.270729][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.275591][T12617] do_SYSENTER_32+0x73/0x90 [ 457.280098][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.286432][T12617] [ 457.288761][T12617] Uninit was stored to memory at: [ 457.293896][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.299646][T12617] __msan_chain_origin+0x54/0xa0 [ 457.304583][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.309725][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.314654][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.319210][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.323892][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.329963][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.336167][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.341421][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.346277][T12617] do_SYSENTER_32+0x73/0x90 [ 457.350808][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.357137][T12617] [ 457.359453][T12617] Uninit was stored to memory at: [ 457.364573][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.370321][T12617] __msan_chain_origin+0x54/0xa0 [ 457.375254][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.380366][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.385303][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.389843][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.394627][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.400708][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.406866][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.412131][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.416984][T12617] do_SYSENTER_32+0x73/0x90 [ 457.421501][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.427830][T12617] [ 457.430143][T12617] Uninit was stored to memory at: [ 457.435148][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 457.440892][T12617] __msan_chain_origin+0x54/0xa0 [ 457.445827][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.450956][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.455888][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.460397][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.465067][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.471173][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.477319][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.482520][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.487373][T12617] do_SYSENTER_32+0x73/0x90 [ 457.491912][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.498360][T12617] [ 457.500674][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 457.507332][T12617] do_recvmmsg+0xbf/0x22d0 [ 457.511782][T12617] do_recvmmsg+0xbf/0x22d0 [ 457.730695][T12617] not chained 220000 origins [ 457.735330][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 457.744135][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.754184][T12617] Call Trace: [ 457.757464][T12617] dump_stack+0x24c/0x2e0 [ 457.761813][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 457.767521][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 457.773361][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 457.779452][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 457.784222][T12617] ? kmsan_get_metadata+0x116/0x180 [ 457.789420][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 457.795229][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 457.801319][T12617] ? kmsan_get_metadata+0x116/0x180 [ 457.806513][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 457.812137][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 457.818193][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 457.823486][T12617] ? _copy_from_user+0x1fd/0x300 [ 457.828426][T12617] __msan_chain_origin+0x54/0xa0 [ 457.833382][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 457.838511][T12617] get_compat_msghdr+0x108/0x2b0 [ 457.843458][T12617] do_recvmmsg+0xdc1/0x22d0 [ 457.847996][T12617] ? kmsan_get_metadata+0x116/0x180 [ 457.853190][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 457.858994][T12617] ? kmsan_get_metadata+0x116/0x180 [ 457.864184][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 457.869808][T12617] ? __msan_poison_alloca+0xec/0x110 [ 457.875093][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 457.879873][T12617] __sys_recvmmsg+0x519/0x6f0 [ 457.884549][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 457.890655][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 457.896808][T12617] __do_fast_syscall_32+0x127/0x180 [ 457.902028][T12617] do_fast_syscall_32+0x6a/0xc0 [ 457.906884][T12617] do_SYSENTER_32+0x73/0x90 [ 457.911393][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 457.917712][T12617] RIP: 0023:0xf7fe3549 [ 457.921919][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 457.941538][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 457.949948][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 457.957915][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 457.965912][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.973879][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.981882][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.989856][T12617] Uninit was stored to memory at: [ 457.994873][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.000642][T12617] __msan_chain_origin+0x54/0xa0 [ 458.005580][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.011821][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.016758][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.021438][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.026117][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.032181][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.038333][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.043531][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.048380][T12617] do_SYSENTER_32+0x73/0x90 [ 458.052935][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.059272][T12617] [ 458.061595][T12617] Uninit was stored to memory at: [ 458.066613][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.072322][T12617] __msan_chain_origin+0x54/0xa0 [ 458.077263][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.082365][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.087308][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.091814][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.096487][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.102600][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.109072][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.114513][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.119481][T12617] do_SYSENTER_32+0x73/0x90 [ 458.124252][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.130617][T12617] [ 458.132955][T12617] Uninit was stored to memory at: [ 458.138049][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.143788][T12617] __msan_chain_origin+0x54/0xa0 [ 458.148739][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.153856][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.158857][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.163366][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.168030][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.174203][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.180344][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.185536][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.190377][T12617] do_SYSENTER_32+0x73/0x90 [ 458.194872][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.201216][T12617] [ 458.203524][T12617] Uninit was stored to memory at: [ 458.208538][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.214247][T12617] __msan_chain_origin+0x54/0xa0 [ 458.219193][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.224306][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.229310][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.233810][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.238498][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.244569][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.250766][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.255969][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.260962][T12617] do_SYSENTER_32+0x73/0x90 [ 458.265494][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.271823][T12617] [ 458.274146][T12617] Uninit was stored to memory at: [ 458.279152][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.284877][T12617] __msan_chain_origin+0x54/0xa0 [ 458.289832][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.294941][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.299909][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.304428][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.309117][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.315178][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.321348][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.326568][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.331416][T12617] do_SYSENTER_32+0x73/0x90 [ 458.335910][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.342278][T12617] [ 458.344592][T12617] Uninit was stored to memory at: [ 458.349606][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.355325][T12617] __msan_chain_origin+0x54/0xa0 [ 458.360284][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.365413][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.370341][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.374844][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.379549][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.385659][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.391814][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.397016][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.401887][T12617] do_SYSENTER_32+0x73/0x90 [ 458.406388][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.412728][T12617] [ 458.415044][T12617] Uninit was stored to memory at: [ 458.420064][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.425783][T12617] __msan_chain_origin+0x54/0xa0 [ 458.430725][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.435827][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.440783][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.445297][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.449982][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.456046][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.462221][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.467434][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.472288][T12617] do_SYSENTER_32+0x73/0x90 [ 458.476784][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.483146][T12617] [ 458.485471][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 458.492122][T12617] do_recvmmsg+0xbf/0x22d0 [ 458.496531][T12617] do_recvmmsg+0xbf/0x22d0 [ 458.723238][T12617] not chained 230000 origins [ 458.727892][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 458.736651][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.746732][T12617] Call Trace: [ 458.750002][T12617] dump_stack+0x24c/0x2e0 [ 458.754330][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 458.760066][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 458.765871][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 458.771954][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 458.776723][T12617] ? kmsan_get_metadata+0x116/0x180 [ 458.781940][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 458.787752][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 458.793816][T12617] ? kmsan_get_metadata+0x116/0x180 [ 458.799019][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 458.804657][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 458.810738][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 458.816028][T12617] ? _copy_from_user+0x1fd/0x300 [ 458.821010][T12617] __msan_chain_origin+0x54/0xa0 [ 458.825949][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 458.831074][T12617] get_compat_msghdr+0x108/0x2b0 [ 458.836019][T12617] do_recvmmsg+0xdc1/0x22d0 [ 458.840553][T12617] ? kmsan_get_metadata+0x116/0x180 [ 458.845749][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 458.851546][T12617] ? kmsan_get_metadata+0x116/0x180 [ 458.856738][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 458.862403][T12617] ? __msan_poison_alloca+0xec/0x110 [ 458.867685][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 458.872472][T12617] __sys_recvmmsg+0x519/0x6f0 [ 458.877152][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 458.883240][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 458.889486][T12617] __do_fast_syscall_32+0x127/0x180 [ 458.894694][T12617] do_fast_syscall_32+0x6a/0xc0 [ 458.899590][T12617] do_SYSENTER_32+0x73/0x90 [ 458.904085][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 458.910402][T12617] RIP: 0023:0xf7fe3549 [ 458.914462][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 458.934100][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 458.942508][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 458.950485][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 458.958447][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.966412][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 458.974379][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.982384][T12617] Uninit was stored to memory at: [ 458.987539][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 458.993285][T12617] __msan_chain_origin+0x54/0xa0 [ 458.998220][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.003348][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.008274][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.012786][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.017460][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.023549][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.029694][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.034889][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.039759][T12617] do_SYSENTER_32+0x73/0x90 [ 459.044265][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.050601][T12617] [ 459.052935][T12617] Uninit was stored to memory at: [ 459.057938][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.063781][T12617] __msan_chain_origin+0x54/0xa0 [ 459.068727][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.073832][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.078787][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.083296][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.087962][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.094034][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.100177][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.105374][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.110943][T12617] do_SYSENTER_32+0x73/0x90 [ 459.115947][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.122431][T12617] [ 459.124763][T12617] Uninit was stored to memory at: [ 459.129774][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.135792][T12617] __msan_chain_origin+0x54/0xa0 [ 459.140878][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.146011][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.151024][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.155520][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.160234][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.166328][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.172478][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.177677][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.182564][T12617] do_SYSENTER_32+0x73/0x90 [ 459.187057][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.193390][T12617] [ 459.195706][T12617] Uninit was stored to memory at: [ 459.200718][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.206517][T12617] __msan_chain_origin+0x54/0xa0 [ 459.211460][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.216571][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.221533][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.226036][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.230722][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.236796][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.243091][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.248311][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.253157][T12617] do_SYSENTER_32+0x73/0x90 [ 459.257656][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.263980][T12617] [ 459.266288][T12617] Uninit was stored to memory at: [ 459.271284][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.276997][T12617] __msan_chain_origin+0x54/0xa0 [ 459.281950][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.287080][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.292019][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.296513][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.301204][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.307262][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.313402][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.318606][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.323447][T12617] do_SYSENTER_32+0x73/0x90 [ 459.327935][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.334252][T12617] [ 459.336561][T12617] Uninit was stored to memory at: [ 459.341573][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.347279][T12617] __msan_chain_origin+0x54/0xa0 [ 459.352202][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.357304][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.362254][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.366761][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.371444][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.377518][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.383685][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.388900][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.393845][T12617] do_SYSENTER_32+0x73/0x90 [ 459.398335][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.404658][T12617] [ 459.406973][T12617] Uninit was stored to memory at: [ 459.411991][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.417726][T12617] __msan_chain_origin+0x54/0xa0 [ 459.422658][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.427849][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.432778][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.437284][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.442124][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.448193][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.454346][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.459580][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.464433][T12617] do_SYSENTER_32+0x73/0x90 [ 459.468956][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.475278][T12617] [ 459.477597][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 459.484255][T12617] do_recvmmsg+0xbf/0x22d0 [ 459.488697][T12617] do_recvmmsg+0xbf/0x22d0 [ 459.716520][T12617] not chained 240000 origins [ 459.721266][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 459.730016][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.740181][T12617] Call Trace: [ 459.743463][T12617] dump_stack+0x24c/0x2e0 [ 459.747815][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 459.753546][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.759356][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 459.765425][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 459.770227][T12617] ? kmsan_get_metadata+0x116/0x180 [ 459.775421][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.781252][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 459.787312][T12617] ? kmsan_get_metadata+0x116/0x180 [ 459.792505][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 459.798157][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 459.804230][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 459.809507][T12617] ? _copy_from_user+0x1fd/0x300 [ 459.814450][T12617] __msan_chain_origin+0x54/0xa0 [ 459.819410][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.824531][T12617] get_compat_msghdr+0x108/0x2b0 [ 459.829490][T12617] do_recvmmsg+0xdc1/0x22d0 [ 459.834008][T12617] ? kmsan_get_metadata+0x116/0x180 [ 459.839212][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.845014][T12617] ? kmsan_get_metadata+0x116/0x180 [ 459.850228][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 459.855849][T12617] ? __msan_poison_alloca+0xec/0x110 [ 459.861120][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 459.865881][T12617] __sys_recvmmsg+0x519/0x6f0 [ 459.870674][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 459.876756][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 459.882922][T12617] __do_fast_syscall_32+0x127/0x180 [ 459.888125][T12617] do_fast_syscall_32+0x6a/0xc0 [ 459.892982][T12617] do_SYSENTER_32+0x73/0x90 [ 459.897585][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 459.903931][T12617] RIP: 0023:0xf7fe3549 [ 459.908000][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.927604][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 459.936039][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 459.944012][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 459.952012][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.959985][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 459.967955][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.975926][T12617] Uninit was stored to memory at: [ 459.980951][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 459.986672][T12617] __msan_chain_origin+0x54/0xa0 [ 459.991627][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 459.996736][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.001685][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.006185][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.010878][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.016948][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.023155][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.028405][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.033274][T12617] do_SYSENTER_32+0x73/0x90 [ 460.037783][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.044128][T12617] [ 460.046442][T12617] Uninit was stored to memory at: [ 460.051459][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.057193][T12617] __msan_chain_origin+0x54/0xa0 [ 460.062455][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.067681][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.072630][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.077145][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.081928][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.088022][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.094171][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.099369][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.104251][T12617] do_SYSENTER_32+0x73/0x90 [ 460.109195][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.115691][T12617] [ 460.118030][T12617] Uninit was stored to memory at: [ 460.123404][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.129140][T12617] __msan_chain_origin+0x54/0xa0 [ 460.134303][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.139453][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.144396][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.148979][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.153659][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.159781][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.165932][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.171191][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.176029][T12617] do_SYSENTER_32+0x73/0x90 [ 460.180519][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.186837][T12617] [ 460.189177][T12617] Uninit was stored to memory at: [ 460.194178][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.199894][T12617] __msan_chain_origin+0x54/0xa0 [ 460.204855][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.210037][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.214978][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.219499][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.224183][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.230335][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.236556][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.242055][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.246935][T12617] do_SYSENTER_32+0x73/0x90 [ 460.251490][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.258046][T12617] [ 460.260365][T12617] Uninit was stored to memory at: [ 460.265376][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.271398][T12617] __msan_chain_origin+0x54/0xa0 [ 460.276361][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.281514][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.286448][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.290992][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.295661][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.301727][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.307901][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.313097][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.317940][T12617] do_SYSENTER_32+0x73/0x90 [ 460.322443][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.328779][T12617] [ 460.331097][T12617] Uninit was stored to memory at: [ 460.336269][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.342084][T12617] __msan_chain_origin+0x54/0xa0 [ 460.347016][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.352150][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.357096][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.361610][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.366292][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.372389][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.378554][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.383774][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.388637][T12617] do_SYSENTER_32+0x73/0x90 [ 460.393142][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.399473][T12617] [ 460.401813][T12617] Uninit was stored to memory at: [ 460.406830][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.412693][T12617] __msan_chain_origin+0x54/0xa0 [ 460.417644][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.422760][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.427716][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.432217][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.436907][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.442968][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.449110][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.454305][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.459166][T12617] do_SYSENTER_32+0x73/0x90 [ 460.463661][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.469995][T12617] [ 460.472307][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 460.478958][T12617] do_recvmmsg+0xbf/0x22d0 [ 460.483363][T12617] do_recvmmsg+0xbf/0x22d0 [ 460.707162][T12617] not chained 250000 origins [ 460.711827][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 460.720636][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.730694][T12617] Call Trace: [ 460.733992][T12617] dump_stack+0x24c/0x2e0 [ 460.738335][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 460.744089][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.749925][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 460.755994][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 460.760758][T12617] ? kmsan_get_metadata+0x116/0x180 [ 460.765957][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.771810][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 460.777870][T12617] ? kmsan_get_metadata+0x116/0x180 [ 460.783074][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.788821][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 460.794943][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 460.800241][T12617] ? _copy_from_user+0x1fd/0x300 [ 460.805180][T12617] __msan_chain_origin+0x54/0xa0 [ 460.810139][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.815271][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.820234][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.824741][T12617] ? kmsan_get_metadata+0x116/0x180 [ 460.829956][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.835755][T12617] ? kmsan_get_metadata+0x116/0x180 [ 460.840962][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.846589][T12617] ? __msan_poison_alloca+0xec/0x110 [ 460.851893][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 460.856651][T12617] __sys_recvmmsg+0x519/0x6f0 [ 460.861319][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 460.867385][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 460.873561][T12617] __do_fast_syscall_32+0x127/0x180 [ 460.878754][T12617] do_fast_syscall_32+0x6a/0xc0 [ 460.883597][T12617] do_SYSENTER_32+0x73/0x90 [ 460.888092][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 460.894421][T12617] RIP: 0023:0xf7fe3549 [ 460.898503][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 460.918107][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 460.926530][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 460.934531][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 460.942516][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.950496][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 460.958485][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.966462][T12617] Uninit was stored to memory at: [ 460.971487][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 460.977201][T12617] __msan_chain_origin+0x54/0xa0 [ 460.982128][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 460.987236][T12617] get_compat_msghdr+0x108/0x2b0 [ 460.992199][T12617] do_recvmmsg+0xdc1/0x22d0 [ 460.996806][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.001490][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.007551][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.013725][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.018922][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.023796][T12617] do_SYSENTER_32+0x73/0x90 [ 461.028299][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.034632][T12617] [ 461.037010][T12617] Uninit was stored to memory at: [ 461.042134][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.047882][T12617] __msan_chain_origin+0x54/0xa0 [ 461.052831][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.057936][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.062866][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.067367][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.072080][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.078140][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.084287][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.089510][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.094380][T12617] do_SYSENTER_32+0x73/0x90 [ 461.098896][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.105350][T12617] [ 461.107705][T12617] Uninit was stored to memory at: [ 461.114858][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.120732][T12617] __msan_chain_origin+0x54/0xa0 [ 461.126185][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.132272][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.137731][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.142249][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.146941][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.153053][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.159203][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.164399][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.169272][T12617] do_SYSENTER_32+0x73/0x90 [ 461.173772][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.180087][T12617] [ 461.182392][T12617] Uninit was stored to memory at: [ 461.187397][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.193122][T12617] __msan_chain_origin+0x54/0xa0 [ 461.198046][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.203145][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.208067][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.212568][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.217234][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.223302][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.229475][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.234670][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.239715][T12617] do_SYSENTER_32+0x73/0x90 [ 461.244262][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.250597][T12617] [ 461.253001][T12617] Uninit was stored to memory at: [ 461.258032][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.263771][T12617] __msan_chain_origin+0x54/0xa0 [ 461.268703][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.273815][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.278743][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.283244][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.287928][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.294000][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.300169][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.305469][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.310347][T12617] do_SYSENTER_32+0x73/0x90 [ 461.314853][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.321201][T12617] [ 461.323506][T12617] Uninit was stored to memory at: [ 461.328514][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.334278][T12617] __msan_chain_origin+0x54/0xa0 [ 461.339227][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.344338][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.349306][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.353820][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.358483][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.364543][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.370713][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.375906][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.380746][T12617] do_SYSENTER_32+0x73/0x90 [ 461.385264][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.391612][T12617] [ 461.393932][T12617] Uninit was stored to memory at: [ 461.398938][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.404675][T12617] __msan_chain_origin+0x54/0xa0 [ 461.409641][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.414769][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.419720][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.424229][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.428903][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.435001][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.441150][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.446342][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.451230][T12617] do_SYSENTER_32+0x73/0x90 [ 461.455726][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.462045][T12617] [ 461.464356][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 461.471018][T12617] do_recvmmsg+0xbf/0x22d0 [ 461.475431][T12617] do_recvmmsg+0xbf/0x22d0 [ 461.679086][T12617] not chained 260000 origins [ 461.683736][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 461.692485][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.702538][T12617] Call Trace: [ 461.705851][T12617] dump_stack+0x24c/0x2e0 [ 461.710188][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 461.715907][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 461.721750][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 461.727847][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 461.732625][T12617] ? kmsan_get_metadata+0x116/0x180 [ 461.737825][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 461.743665][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 461.749790][T12617] ? kmsan_get_metadata+0x116/0x180 [ 461.754997][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 461.760646][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 461.766707][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 461.771985][T12617] ? _copy_from_user+0x1fd/0x300 [ 461.776919][T12617] __msan_chain_origin+0x54/0xa0 [ 461.781881][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.787032][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.792014][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.796538][T12617] ? kmsan_get_metadata+0x116/0x180 [ 461.801729][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 461.807529][T12617] ? kmsan_get_metadata+0x116/0x180 [ 461.812736][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 461.818370][T12617] ? __msan_poison_alloca+0xec/0x110 [ 461.824088][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 461.828909][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.833598][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.839698][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.845868][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.851102][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.855958][T12617] do_SYSENTER_32+0x73/0x90 [ 461.860486][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 461.866817][T12617] RIP: 0023:0xf7fe3549 [ 461.870896][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 461.890521][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 461.898931][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 461.906903][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 461.914888][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.922991][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 461.930964][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.938948][T12617] Uninit was stored to memory at: [ 461.943993][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 461.949714][T12617] __msan_chain_origin+0x54/0xa0 [ 461.954666][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 461.959789][T12617] get_compat_msghdr+0x108/0x2b0 [ 461.964723][T12617] do_recvmmsg+0xdc1/0x22d0 [ 461.969262][T12617] __sys_recvmmsg+0x519/0x6f0 [ 461.973936][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 461.980009][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 461.986290][T12617] __do_fast_syscall_32+0x127/0x180 [ 461.991657][T12617] do_fast_syscall_32+0x6a/0xc0 [ 461.996515][T12617] do_SYSENTER_32+0x73/0x90 [ 462.001022][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.007356][T12617] [ 462.009685][T12617] Uninit was stored to memory at: [ 462.014698][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.020452][T12617] __msan_chain_origin+0x54/0xa0 [ 462.025393][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.030527][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.035479][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.039973][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.044650][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.050801][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.056961][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.062214][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.067081][T12617] do_SYSENTER_32+0x73/0x90 [ 462.071734][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.078067][T12617] [ 462.080377][T12617] Uninit was stored to memory at: [ 462.085383][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.091124][T12617] __msan_chain_origin+0x54/0xa0 [ 462.096108][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.101213][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.106275][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.110819][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.115896][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.122389][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.129512][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.134917][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.139777][T12617] do_SYSENTER_32+0x73/0x90 [ 462.144274][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.150642][T12617] [ 462.152954][T12617] Uninit was stored to memory at: [ 462.157951][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.163659][T12617] __msan_chain_origin+0x54/0xa0 [ 462.168600][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.173704][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.178628][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.183134][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.187797][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.193860][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.200001][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.205192][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.210063][T12617] do_SYSENTER_32+0x73/0x90 [ 462.214562][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.220889][T12617] [ 462.223208][T12617] Uninit was stored to memory at: [ 462.228214][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.233927][T12617] __msan_chain_origin+0x54/0xa0 [ 462.238859][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.244073][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.249016][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.253542][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.258211][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.264274][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.270464][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.275660][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.280500][T12617] do_SYSENTER_32+0x73/0x90 [ 462.284992][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.291339][T12617] [ 462.293646][T12617] Uninit was stored to memory at: [ 462.298661][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.304372][T12617] __msan_chain_origin+0x54/0xa0 [ 462.309316][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.314422][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.319368][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.323861][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.328529][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.334591][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.340761][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.345964][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.350855][T12617] do_SYSENTER_32+0x73/0x90 [ 462.355382][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.361716][T12617] [ 462.364036][T12617] Uninit was stored to memory at: [ 462.369037][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.374754][T12617] __msan_chain_origin+0x54/0xa0 [ 462.379692][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.384801][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.389765][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.394262][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.398951][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.405019][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.411257][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.416454][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.421343][T12617] do_SYSENTER_32+0x73/0x90 [ 462.425856][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.432206][T12617] [ 462.434518][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 462.441289][T12617] do_recvmmsg+0xbf/0x22d0 [ 462.445699][T12617] do_recvmmsg+0xbf/0x22d0 [ 462.651694][T12617] not chained 270000 origins [ 462.656331][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 462.665114][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.675168][T12617] Call Trace: [ 462.678456][T12617] dump_stack+0x24c/0x2e0 [ 462.682793][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 462.688504][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 462.694308][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 462.700399][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 462.705171][T12617] ? kmsan_get_metadata+0x116/0x180 [ 462.710356][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 462.716158][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 462.722240][T12617] ? kmsan_get_metadata+0x116/0x180 [ 462.727430][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 462.733067][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 462.739121][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 462.744404][T12617] ? _copy_from_user+0x1fd/0x300 [ 462.749354][T12617] __msan_chain_origin+0x54/0xa0 [ 462.754283][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.759410][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.764373][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.768892][T12617] ? kmsan_get_metadata+0x116/0x180 [ 462.774081][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 462.779881][T12617] ? kmsan_get_metadata+0x116/0x180 [ 462.785098][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 462.790721][T12617] ? __msan_poison_alloca+0xec/0x110 [ 462.796008][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 462.800795][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.805473][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.811548][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.817701][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.822934][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.827811][T12617] do_SYSENTER_32+0x73/0x90 [ 462.832322][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.838639][T12617] RIP: 0023:0xf7fe3549 [ 462.842708][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.862311][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 462.870752][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 462.878841][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 462.886925][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.895103][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 462.903115][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.911107][T12617] Uninit was stored to memory at: [ 462.916133][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.921858][T12617] __msan_chain_origin+0x54/0xa0 [ 462.926799][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 462.931996][T12617] get_compat_msghdr+0x108/0x2b0 [ 462.936921][T12617] do_recvmmsg+0xdc1/0x22d0 [ 462.941414][T12617] __sys_recvmmsg+0x519/0x6f0 [ 462.946086][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 462.952171][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 462.958330][T12617] __do_fast_syscall_32+0x127/0x180 [ 462.963522][T12617] do_fast_syscall_32+0x6a/0xc0 [ 462.968388][T12617] do_SYSENTER_32+0x73/0x90 [ 462.972901][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 462.979237][T12617] [ 462.981546][T12617] Uninit was stored to memory at: [ 462.986564][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 462.992273][T12617] __msan_chain_origin+0x54/0xa0 [ 462.997198][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.002319][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.007244][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.011737][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.016405][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.022465][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.028610][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.033813][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.038655][T12617] do_SYSENTER_32+0x73/0x90 [ 463.043145][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.049480][T12617] [ 463.051809][T12617] Uninit was stored to memory at: [ 463.056831][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.062546][T12617] __msan_chain_origin+0x54/0xa0 [ 463.067479][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.072635][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.077600][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.082098][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.086765][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.092840][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.102678][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.108532][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.114708][T12617] do_SYSENTER_32+0x73/0x90 [ 463.119379][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.126090][T12617] [ 463.128548][T12617] Uninit was stored to memory at: [ 463.133790][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.139529][T12617] __msan_chain_origin+0x54/0xa0 [ 463.144491][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.149639][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.154569][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.159087][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.163839][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.169911][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.176097][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.181316][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.186151][T12617] do_SYSENTER_32+0x73/0x90 [ 463.190653][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.197773][T12617] [ 463.200087][T12617] Uninit was stored to memory at: [ 463.205097][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.210852][T12617] __msan_chain_origin+0x54/0xa0 [ 463.215969][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.221548][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.226494][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.230993][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.235679][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.241948][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.248107][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.253578][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.258542][T12617] do_SYSENTER_32+0x73/0x90 [ 463.263066][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.269391][T12617] [ 463.271718][T12617] Uninit was stored to memory at: [ 463.276736][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.282450][T12617] __msan_chain_origin+0x54/0xa0 [ 463.288006][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.293110][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.298036][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.302545][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.307223][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.313284][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.319427][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.324618][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.329482][T12617] do_SYSENTER_32+0x73/0x90 [ 463.333998][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.340405][T12617] [ 463.342728][T12617] Uninit was stored to memory at: [ 463.347749][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.353465][T12617] __msan_chain_origin+0x54/0xa0 [ 463.358386][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.363498][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.368427][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.373219][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.377918][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.383981][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.390131][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.395342][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.400333][T12617] do_SYSENTER_32+0x73/0x90 [ 463.404846][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.411195][T12617] [ 463.413545][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 463.420208][T12617] do_recvmmsg+0xbf/0x22d0 [ 463.425060][T12617] do_recvmmsg+0xbf/0x22d0 [ 463.649387][T12617] not chained 280000 origins [ 463.654007][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 463.663037][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.673201][T12617] Call Trace: [ 463.677171][T12617] dump_stack+0x24c/0x2e0 [ 463.681508][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 463.687245][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 463.693043][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 463.699099][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 463.703853][T12617] ? kmsan_get_metadata+0x116/0x180 [ 463.709038][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 463.716756][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 463.722916][T12617] ? kmsan_get_metadata+0x116/0x180 [ 463.728122][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 463.733756][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 463.739822][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 463.745110][T12617] ? _copy_from_user+0x1fd/0x300 [ 463.750063][T12617] __msan_chain_origin+0x54/0xa0 [ 463.754993][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.760110][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.765041][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.769653][T12617] ? kmsan_get_metadata+0x116/0x180 [ 463.774863][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 463.780700][T12617] ? kmsan_get_metadata+0x116/0x180 [ 463.785915][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 463.791570][T12617] ? __msan_poison_alloca+0xec/0x110 [ 463.796853][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 463.801615][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.806288][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.812372][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.818522][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.823711][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.828554][T12617] do_SYSENTER_32+0x73/0x90 [ 463.833052][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.839469][T12617] RIP: 0023:0xf7fe3549 [ 463.843523][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 463.863126][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 463.871710][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 463.879801][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 463.887944][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.897017][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 463.904989][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.913012][T12617] Uninit was stored to memory at: [ 463.918017][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.924348][T12617] __msan_chain_origin+0x54/0xa0 [ 463.929300][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 463.934408][T12617] get_compat_msghdr+0x108/0x2b0 [ 463.940239][T12617] do_recvmmsg+0xdc1/0x22d0 [ 463.944845][T12617] __sys_recvmmsg+0x519/0x6f0 [ 463.949670][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 463.955840][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 463.962830][T12617] __do_fast_syscall_32+0x127/0x180 [ 463.968092][T12617] do_fast_syscall_32+0x6a/0xc0 [ 463.972938][T12617] do_SYSENTER_32+0x73/0x90 [ 463.977482][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 463.983809][T12617] [ 463.986123][T12617] Uninit was stored to memory at: [ 463.991137][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 463.996850][T12617] __msan_chain_origin+0x54/0xa0 [ 464.001778][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.006887][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.011838][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.016417][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.021092][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.027165][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.033355][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.038558][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.043425][T12617] do_SYSENTER_32+0x73/0x90 [ 464.048053][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.054500][T12617] [ 464.056828][T12617] Uninit was stored to memory at: [ 464.061827][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.067544][T12617] __msan_chain_origin+0x54/0xa0 [ 464.072786][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.077912][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.082841][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.087361][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.092037][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.098124][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.104877][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.111090][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.116825][T12617] do_SYSENTER_32+0x73/0x90 [ 464.121451][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.128117][T12617] [ 464.130447][T12617] Uninit was stored to memory at: [ 464.135483][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.141545][T12617] __msan_chain_origin+0x54/0xa0 [ 464.146488][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.151618][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.156551][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.161073][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.165748][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.171842][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.177990][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.183182][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.188022][T12617] do_SYSENTER_32+0x73/0x90 [ 464.192522][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.198890][T12617] [ 464.201218][T12617] Uninit was stored to memory at: [ 464.206232][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.211978][T12617] __msan_chain_origin+0x54/0xa0 [ 464.216921][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.222200][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.227237][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.231737][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.236402][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.242481][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.248819][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.254019][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.258879][T12617] do_SYSENTER_32+0x73/0x90 [ 464.263373][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.269691][T12617] [ 464.272002][T12617] Uninit was stored to memory at: [ 464.277025][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.282738][T12617] __msan_chain_origin+0x54/0xa0 [ 464.287660][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.292756][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.297707][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.302218][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.306887][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.312976][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.319393][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.324587][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.329454][T12617] do_SYSENTER_32+0x73/0x90 [ 464.333944][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.340289][T12617] [ 464.342598][T12617] Uninit was stored to memory at: [ 464.347610][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.353428][T12617] __msan_chain_origin+0x54/0xa0 [ 464.358352][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.363454][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.368379][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.372881][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.377586][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.383655][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.389822][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.395032][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.399992][T12617] do_SYSENTER_32+0x73/0x90 [ 464.404496][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.410856][T12617] [ 464.413189][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 464.419854][T12617] do_recvmmsg+0xbf/0x22d0 [ 464.424286][T12617] do_recvmmsg+0xbf/0x22d0 [ 464.711387][T12617] not chained 290000 origins [ 464.716115][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 464.724916][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.734968][T12617] Call Trace: [ 464.738258][T12617] dump_stack+0x24c/0x2e0 [ 464.742637][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 464.748346][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 464.754140][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 464.760196][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 464.764994][T12617] ? kmsan_get_metadata+0x116/0x180 [ 464.770197][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 464.775994][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 464.782073][T12617] ? kmsan_get_metadata+0x116/0x180 [ 464.787263][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 464.792886][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 464.798940][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 464.804216][T12617] ? _copy_from_user+0x1fd/0x300 [ 464.809144][T12617] __msan_chain_origin+0x54/0xa0 [ 464.814089][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.819210][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.824139][T12617] do_recvmmsg+0xdc1/0x22d0 [ 464.828630][T12617] ? kmsan_get_metadata+0x116/0x180 [ 464.833819][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 464.839632][T12617] ? kmsan_get_metadata+0x116/0x180 [ 464.844821][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 464.850439][T12617] ? __msan_poison_alloca+0xec/0x110 [ 464.855713][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 464.860507][T12617] __sys_recvmmsg+0x519/0x6f0 [ 464.865187][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 464.871273][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 464.877548][T12617] __do_fast_syscall_32+0x127/0x180 [ 464.882749][T12617] do_fast_syscall_32+0x6a/0xc0 [ 464.887616][T12617] do_SYSENTER_32+0x73/0x90 [ 464.892121][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 464.898454][T12617] RIP: 0023:0xf7fe3549 [ 464.902549][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 464.922180][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 464.930598][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 464.938588][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 464.946563][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.954558][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 464.962552][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.970532][T12617] Uninit was stored to memory at: [ 464.975546][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 464.981283][T12617] __msan_chain_origin+0x54/0xa0 [ 464.986215][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 464.991341][T12617] get_compat_msghdr+0x108/0x2b0 [ 464.996287][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.000781][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.005451][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.011545][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.017738][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.022934][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.027800][T12617] do_SYSENTER_32+0x73/0x90 [ 465.032296][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.038626][T12617] [ 465.040933][T12617] Uninit was stored to memory at: [ 465.045935][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.051669][T12617] __msan_chain_origin+0x54/0xa0 [ 465.056595][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.061697][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.066622][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.071113][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.075797][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.081856][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.088004][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.093211][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.098049][T12617] do_SYSENTER_32+0x73/0x90 [ 465.102554][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.109128][T12617] [ 465.111649][T12617] Uninit was stored to memory at: [ 465.116666][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.122966][T12617] __msan_chain_origin+0x54/0xa0 [ 465.128249][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.133376][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.138509][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.143261][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.147988][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.154055][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.160325][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.165532][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.170407][T12617] do_SYSENTER_32+0x73/0x90 [ 465.174908][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.181258][T12617] [ 465.183583][T12617] Uninit was stored to memory at: [ 465.188588][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.194308][T12617] __msan_chain_origin+0x54/0xa0 [ 465.199253][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.204359][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.209303][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.213797][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.218468][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.224565][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.230739][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.235931][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.240773][T12617] do_SYSENTER_32+0x73/0x90 [ 465.245269][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.251619][T12617] [ 465.253924][T12617] Uninit was stored to memory at: [ 465.258941][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.264656][T12617] __msan_chain_origin+0x54/0xa0 [ 465.264688][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.264717][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.264744][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.264767][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.264794][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.264826][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.264857][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.264888][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.264917][T12617] do_SYSENTER_32+0x73/0x90 [ 465.264945][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.264976][T12617] [ 465.264982][T12617] Uninit was stored to memory at: [ 465.264990][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.335521][T12617] __msan_chain_origin+0x54/0xa0 [ 465.340486][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.345591][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.350542][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.355038][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.359728][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.365788][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.371978][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.377168][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.382024][T12617] do_SYSENTER_32+0x73/0x90 [ 465.386520][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.392871][T12617] [ 465.395190][T12617] Uninit was stored to memory at: [ 465.400210][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.405946][T12617] __msan_chain_origin+0x54/0xa0 [ 465.410916][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.416026][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.420979][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.425509][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.430208][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.436268][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.442415][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.447605][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.452448][T12617] do_SYSENTER_32+0x73/0x90 [ 465.456954][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.463275][T12617] [ 465.465610][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 465.472278][T12617] do_recvmmsg+0xbf/0x22d0 [ 465.476684][T12617] do_recvmmsg+0xbf/0x22d0 [ 465.688632][T12617] not chained 300000 origins [ 465.693248][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 465.702009][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.712062][T12617] Call Trace: [ 465.715341][T12617] dump_stack+0x24c/0x2e0 [ 465.719700][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 465.725430][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 465.731242][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 465.737306][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 465.742086][T12617] ? kmsan_get_metadata+0x116/0x180 [ 465.747274][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 465.753173][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 465.759227][T12617] ? kmsan_get_metadata+0x116/0x180 [ 465.764419][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 465.770053][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 465.776108][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 465.781423][T12617] ? _copy_from_user+0x1fd/0x300 [ 465.786357][T12617] __msan_chain_origin+0x54/0xa0 [ 465.791286][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.796396][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.801347][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.805840][T12617] ? kmsan_get_metadata+0x116/0x180 [ 465.811025][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 465.816827][T12617] ? kmsan_get_metadata+0x116/0x180 [ 465.822055][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 465.827675][T12617] ? __msan_poison_alloca+0xec/0x110 [ 465.832969][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 465.837745][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.842416][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.848474][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.854628][T12617] __do_fast_syscall_32+0x127/0x180 [ 465.859844][T12617] do_fast_syscall_32+0x6a/0xc0 [ 465.864689][T12617] do_SYSENTER_32+0x73/0x90 [ 465.869294][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 465.875614][T12617] RIP: 0023:0xf7fe3549 [ 465.879689][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 465.899287][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 465.907694][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 465.915668][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 465.923662][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.931769][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 465.939774][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.947770][T12617] Uninit was stored to memory at: [ 465.952775][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 465.958586][T12617] __msan_chain_origin+0x54/0xa0 [ 465.963511][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 465.968611][T12617] get_compat_msghdr+0x108/0x2b0 [ 465.973538][T12617] do_recvmmsg+0xdc1/0x22d0 [ 465.978133][T12617] __sys_recvmmsg+0x519/0x6f0 [ 465.982812][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 465.988878][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 465.995025][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.000217][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.005060][T12617] do_SYSENTER_32+0x73/0x90 [ 466.009608][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.015928][T12617] [ 466.018276][T12617] Uninit was stored to memory at: [ 466.023274][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.028986][T12617] __msan_chain_origin+0x54/0xa0 [ 466.033913][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.039023][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.043967][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.048457][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.053121][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.059176][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.065323][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.070539][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.075378][T12617] do_SYSENTER_32+0x73/0x90 [ 466.079868][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.086187][T12617] [ 466.088506][T12617] Uninit was stored to memory at: [ 466.093503][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.099227][T12617] __msan_chain_origin+0x54/0xa0 [ 466.104551][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.109713][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.115359][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.120226][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.125095][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.131586][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.138083][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.143325][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.148275][T12617] do_SYSENTER_32+0x73/0x90 [ 466.152784][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.159098][T12617] [ 466.161430][T12617] Uninit was stored to memory at: [ 466.166432][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.172173][T12617] __msan_chain_origin+0x54/0xa0 [ 466.177105][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.182210][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.187138][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.191655][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.196320][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.202384][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.208544][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.213784][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.218655][T12617] do_SYSENTER_32+0x73/0x90 [ 466.223153][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.229484][T12617] [ 466.232361][T12617] Uninit was stored to memory at: [ 466.237362][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.243075][T12617] __msan_chain_origin+0x54/0xa0 [ 466.248011][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.253119][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.258047][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.262548][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.267223][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.273312][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.279458][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.284739][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.289632][T12617] do_SYSENTER_32+0x73/0x90 [ 466.294125][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.300443][T12617] [ 466.302812][T12617] Uninit was stored to memory at: [ 466.307826][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.313740][T12617] __msan_chain_origin+0x54/0xa0 [ 466.318669][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.323774][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.328709][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.333223][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.337907][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.343979][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.350157][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.355351][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.360219][T12617] do_SYSENTER_32+0x73/0x90 [ 466.364711][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.371059][T12617] [ 466.373367][T12617] Uninit was stored to memory at: [ 466.378368][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.384098][T12617] __msan_chain_origin+0x54/0xa0 [ 466.389083][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.394216][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.399168][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.403677][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.408346][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.414437][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.420633][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.425835][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.430709][T12617] do_SYSENTER_32+0x73/0x90 [ 466.435224][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.441613][T12617] [ 466.443935][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 466.450612][T12617] do_recvmmsg+0xbf/0x22d0 [ 466.455027][T12617] do_recvmmsg+0xbf/0x22d0 [ 466.666441][T12617] not chained 310000 origins [ 466.671101][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 466.679879][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.689926][T12617] Call Trace: [ 466.693198][T12617] dump_stack+0x24c/0x2e0 [ 466.697544][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 466.703253][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 466.709307][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 466.715406][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 466.720159][T12617] ? kmsan_get_metadata+0x116/0x180 [ 466.725344][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 466.731154][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 466.737208][T12617] ? kmsan_get_metadata+0x116/0x180 [ 466.742395][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 466.748025][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 466.754098][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 466.759441][T12617] ? _copy_from_user+0x1fd/0x300 [ 466.764378][T12617] __msan_chain_origin+0x54/0xa0 [ 466.769322][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.774445][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.779377][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.783879][T12617] ? kmsan_get_metadata+0x116/0x180 [ 466.789072][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 466.794868][T12617] ? kmsan_get_metadata+0x116/0x180 [ 466.800051][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 466.805668][T12617] ? __msan_poison_alloca+0xec/0x110 [ 466.810947][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 466.815717][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.820385][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.826440][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.832581][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.837769][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.842608][T12617] do_SYSENTER_32+0x73/0x90 [ 466.847128][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.853504][T12617] RIP: 0023:0xf7fe3549 [ 466.857578][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 466.877181][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 466.885589][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 466.893571][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 466.901528][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.909485][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 466.917459][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.925421][T12617] Uninit was stored to memory at: [ 466.930533][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 466.936273][T12617] __msan_chain_origin+0x54/0xa0 [ 466.941210][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 466.946306][T12617] get_compat_msghdr+0x108/0x2b0 [ 466.951244][T12617] do_recvmmsg+0xdc1/0x22d0 [ 466.955737][T12617] __sys_recvmmsg+0x519/0x6f0 [ 466.960431][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 466.966493][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 466.972639][T12617] __do_fast_syscall_32+0x127/0x180 [ 466.977824][T12617] do_fast_syscall_32+0x6a/0xc0 [ 466.982661][T12617] do_SYSENTER_32+0x73/0x90 [ 466.987149][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 466.993482][T12617] [ 466.995899][T12617] Uninit was stored to memory at: [ 467.001078][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.006855][T12617] __msan_chain_origin+0x54/0xa0 [ 467.011800][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.016921][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.021850][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.026347][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.031011][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.037066][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.043225][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.048415][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.053277][T12617] do_SYSENTER_32+0x73/0x90 [ 467.057767][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.064086][T12617] [ 467.066398][T12617] Uninit was stored to memory at: [ 467.071397][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.077101][T12617] __msan_chain_origin+0x54/0xa0 [ 467.082021][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.087133][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.092072][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.096559][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.101344][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.107751][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.114590][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.119815][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.124867][T12617] do_SYSENTER_32+0x73/0x90 [ 467.131193][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.137704][T12617] [ 467.140018][T12617] Uninit was stored to memory at: [ 467.145035][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.150749][T12617] __msan_chain_origin+0x54/0xa0 [ 467.155732][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.160872][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.165850][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.170353][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.175019][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.181077][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.187244][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.192432][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.197288][T12617] do_SYSENTER_32+0x73/0x90 [ 467.201779][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.208109][T12617] [ 467.210434][T12617] Uninit was stored to memory at: [ 467.215433][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.221140][T12617] __msan_chain_origin+0x54/0xa0 [ 467.226064][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.231163][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.236085][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.240579][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.245257][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.251325][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.257471][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.262681][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.267530][T12617] do_SYSENTER_32+0x73/0x90 [ 467.272030][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.278347][T12617] [ 467.280652][T12617] Uninit was stored to memory at: [ 467.285653][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.291359][T12617] __msan_chain_origin+0x54/0xa0 [ 467.296296][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.301405][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.306348][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.310838][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.315499][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.321552][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.327691][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.332878][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.337713][T12617] do_SYSENTER_32+0x73/0x90 [ 467.342221][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.348535][T12617] [ 467.350853][T12617] Uninit was stored to memory at: [ 467.355852][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.361557][T12617] __msan_chain_origin+0x54/0xa0 [ 467.366481][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.371605][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.376547][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.381035][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.385712][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.391771][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.397939][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.403126][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.407968][T12617] do_SYSENTER_32+0x73/0x90 [ 467.412512][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.418837][T12617] [ 467.421145][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 467.427801][T12617] do_recvmmsg+0xbf/0x22d0 [ 467.432213][T12617] do_recvmmsg+0xbf/0x22d0 [ 467.658041][T12617] not chained 320000 origins [ 467.662901][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 467.671668][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.681720][T12617] Call Trace: [ 467.684993][T12617] dump_stack+0x24c/0x2e0 [ 467.689347][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 467.695053][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 467.700898][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 467.706961][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 467.711738][T12617] ? kmsan_get_metadata+0x116/0x180 [ 467.716958][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 467.722776][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 467.728869][T12617] ? kmsan_get_metadata+0x116/0x180 [ 467.734054][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 467.739690][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 467.745745][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 467.751031][T12617] ? _copy_from_user+0x1fd/0x300 [ 467.755963][T12617] __msan_chain_origin+0x54/0xa0 [ 467.761035][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.766192][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.771138][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.775647][T12617] ? kmsan_get_metadata+0x116/0x180 [ 467.780873][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 467.786677][T12617] ? kmsan_get_metadata+0x116/0x180 [ 467.791880][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 467.797516][T12617] ? __msan_poison_alloca+0xec/0x110 [ 467.809757][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 467.814513][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.819193][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.825250][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.831391][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.836580][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.841429][T12617] do_SYSENTER_32+0x73/0x90 [ 467.845922][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.852236][T12617] RIP: 0023:0xf7fe3549 [ 467.856303][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.875896][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 467.884303][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 467.892373][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 467.900349][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.908305][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 467.916261][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.924251][T12617] Uninit was stored to memory at: [ 467.929274][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 467.935004][T12617] __msan_chain_origin+0x54/0xa0 [ 467.939926][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 467.945021][T12617] get_compat_msghdr+0x108/0x2b0 [ 467.949959][T12617] do_recvmmsg+0xdc1/0x22d0 [ 467.954466][T12617] __sys_recvmmsg+0x519/0x6f0 [ 467.959129][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 467.965181][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 467.971336][T12617] __do_fast_syscall_32+0x127/0x180 [ 467.976520][T12617] do_fast_syscall_32+0x6a/0xc0 [ 467.981362][T12617] do_SYSENTER_32+0x73/0x90 [ 467.985896][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 467.992233][T12617] [ 467.994553][T12617] Uninit was stored to memory at: [ 467.999553][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.005360][T12617] __msan_chain_origin+0x54/0xa0 [ 468.010416][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.015550][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.020477][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.024973][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.029745][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.035804][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.041965][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.047151][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.051986][T12617] do_SYSENTER_32+0x73/0x90 [ 468.056474][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.062790][T12617] [ 468.065112][T12617] Uninit was stored to memory at: [ 468.070108][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.075833][T12617] __msan_chain_origin+0x54/0xa0 [ 468.080754][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.085852][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.090780][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.095267][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.099935][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.106001][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.112690][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.118130][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.123514][T12617] do_SYSENTER_32+0x73/0x90 [ 468.128035][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.134443][T12617] [ 468.136750][T12617] Uninit was stored to memory at: [ 468.141752][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.147493][T12617] __msan_chain_origin+0x54/0xa0 [ 468.152472][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.157605][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.162535][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.167050][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.171733][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.177820][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.183966][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.189155][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.193998][T12617] do_SYSENTER_32+0x73/0x90 [ 468.198485][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.204803][T12617] [ 468.207118][T12617] Uninit was stored to memory at: [ 468.212122][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.217860][T12617] __msan_chain_origin+0x54/0xa0 [ 468.222793][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.227897][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.232829][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.237437][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.242113][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.248222][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.254390][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.259586][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.264474][T12617] do_SYSENTER_32+0x73/0x90 [ 468.269007][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.275322][T12617] [ 468.277643][T12617] Uninit was stored to memory at: [ 468.282640][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.288352][T12617] __msan_chain_origin+0x54/0xa0 [ 468.293316][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.298420][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.303344][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.307832][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.312508][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.318562][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.324702][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.329889][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.334726][T12617] do_SYSENTER_32+0x73/0x90 [ 468.339241][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.345640][T12617] [ 468.347945][T12617] Uninit was stored to memory at: [ 468.352941][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.358664][T12617] __msan_chain_origin+0x54/0xa0 [ 468.363595][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.368692][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.373612][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.378100][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.382762][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.388821][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.394968][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.400176][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.405019][T12617] do_SYSENTER_32+0x73/0x90 [ 468.409535][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.415879][T12617] [ 468.418191][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 468.424857][T12617] do_recvmmsg+0xbf/0x22d0 [ 468.429297][T12617] do_recvmmsg+0xbf/0x22d0 [ 468.653035][T12617] not chained 330000 origins [ 468.657663][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 468.666551][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.676604][T12617] Call Trace: [ 468.679876][T12617] dump_stack+0x24c/0x2e0 [ 468.684203][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 468.689932][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 468.695729][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 468.701794][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 468.706580][T12617] ? kmsan_get_metadata+0x116/0x180 [ 468.711787][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 468.717598][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 468.723654][T12617] ? kmsan_get_metadata+0x116/0x180 [ 468.728840][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 468.734476][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 468.740530][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 468.745802][T12617] ? _copy_from_user+0x1fd/0x300 [ 468.750726][T12617] __msan_chain_origin+0x54/0xa0 [ 468.755654][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.760770][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.765698][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.770190][T12617] ? kmsan_get_metadata+0x116/0x180 [ 468.775378][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 468.781176][T12617] ? kmsan_get_metadata+0x116/0x180 [ 468.786363][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 468.791998][T12617] ? __msan_poison_alloca+0xec/0x110 [ 468.797285][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 468.802039][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.806712][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.812775][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.818921][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.824112][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.828977][T12617] do_SYSENTER_32+0x73/0x90 [ 468.833497][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.839830][T12617] RIP: 0023:0xf7fe3549 [ 468.843928][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 468.863537][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 468.871963][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 468.879922][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 468.887907][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.895878][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 468.903844][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.911844][T12617] Uninit was stored to memory at: [ 468.916867][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.922583][T12617] __msan_chain_origin+0x54/0xa0 [ 468.927528][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 468.932755][T12617] get_compat_msghdr+0x108/0x2b0 [ 468.937693][T12617] do_recvmmsg+0xdc1/0x22d0 [ 468.942199][T12617] __sys_recvmmsg+0x519/0x6f0 [ 468.946866][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 468.952932][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 468.959083][T12617] __do_fast_syscall_32+0x127/0x180 [ 468.964293][T12617] do_fast_syscall_32+0x6a/0xc0 [ 468.969153][T12617] do_SYSENTER_32+0x73/0x90 [ 468.973642][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 468.979961][T12617] [ 468.982287][T12617] Uninit was stored to memory at: [ 468.987287][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 468.993100][T12617] __msan_chain_origin+0x54/0xa0 [ 468.998046][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.003158][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.008166][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.012668][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.017493][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.023584][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.029741][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.034936][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.039776][T12617] do_SYSENTER_32+0x73/0x90 [ 469.044283][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.050633][T12617] [ 469.052939][T12617] Uninit was stored to memory at: [ 469.057934][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.063641][T12617] __msan_chain_origin+0x54/0xa0 [ 469.068580][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.073698][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.078626][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.083146][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.087828][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.093886][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.100181][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.106189][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.111852][T12617] do_SYSENTER_32+0x73/0x90 [ 469.116478][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.123091][T12617] [ 469.125447][T12617] Uninit was stored to memory at: [ 469.130721][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.136727][T12617] __msan_chain_origin+0x54/0xa0 [ 469.141674][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.146795][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.151739][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.156234][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.161008][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.167085][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.173233][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.178457][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.183479][T12617] do_SYSENTER_32+0x73/0x90 [ 469.187975][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.194317][T12617] [ 469.196711][T12617] Uninit was stored to memory at: [ 469.201726][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.207458][T12617] __msan_chain_origin+0x54/0xa0 [ 469.212396][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.217612][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.222551][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.227047][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.231723][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.237796][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.243946][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.249149][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.253992][T12617] do_SYSENTER_32+0x73/0x90 [ 469.258510][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.264832][T12617] [ 469.267145][T12617] Uninit was stored to memory at: [ 469.272337][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.278057][T12617] __msan_chain_origin+0x54/0xa0 [ 469.283002][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.288119][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.293060][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.297568][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.302231][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.308340][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.314498][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.319711][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.324564][T12617] do_SYSENTER_32+0x73/0x90 [ 469.329078][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.335405][T12617] [ 469.337711][T12617] Uninit was stored to memory at: [ 469.342710][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.348439][T12617] __msan_chain_origin+0x54/0xa0 [ 469.353378][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.358479][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.363418][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.367907][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.372589][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.378644][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.384796][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.389996][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.394834][T12617] do_SYSENTER_32+0x73/0x90 [ 469.399329][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.405647][T12617] [ 469.407955][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 469.414612][T12617] do_recvmmsg+0xbf/0x22d0 [ 469.419096][T12617] do_recvmmsg+0xbf/0x22d0 [ 469.687645][T12617] not chained 340000 origins [ 469.692379][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 469.701136][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.711193][T12617] Call Trace: [ 469.714466][T12617] dump_stack+0x24c/0x2e0 [ 469.718800][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 469.724516][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 469.730347][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 469.736520][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 469.741282][T12617] ? kmsan_get_metadata+0x116/0x180 [ 469.746471][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 469.752353][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 469.758448][T12617] ? kmsan_get_metadata+0x116/0x180 [ 469.763644][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 469.769354][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 469.775442][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 469.780750][T12617] ? _copy_from_user+0x1fd/0x300 [ 469.785682][T12617] __msan_chain_origin+0x54/0xa0 [ 469.790613][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.795721][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.800660][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.805155][T12617] ? kmsan_get_metadata+0x116/0x180 [ 469.810343][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 469.816155][T12617] ? kmsan_get_metadata+0x116/0x180 [ 469.821341][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 469.826985][T12617] ? __msan_poison_alloca+0xec/0x110 [ 469.832265][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 469.837022][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.841690][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.847752][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.853894][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.859085][T12617] do_fast_syscall_32+0x6a/0xc0 [ 469.863926][T12617] do_SYSENTER_32+0x73/0x90 [ 469.868420][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 469.874738][T12617] RIP: 0023:0xf7fe3549 [ 469.878809][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 469.898425][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 469.906845][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 469.914803][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 469.922778][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.930739][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 469.938720][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.946695][T12617] Uninit was stored to memory at: [ 469.951723][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 469.957495][T12617] __msan_chain_origin+0x54/0xa0 [ 469.962425][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 469.967539][T12617] get_compat_msghdr+0x108/0x2b0 [ 469.972464][T12617] do_recvmmsg+0xdc1/0x22d0 [ 469.976955][T12617] __sys_recvmmsg+0x519/0x6f0 [ 469.981618][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 469.987686][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 469.993826][T12617] __do_fast_syscall_32+0x127/0x180 [ 469.999028][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.003866][T12617] do_SYSENTER_32+0x73/0x90 [ 470.008369][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.014685][T12617] [ 470.016991][T12617] Uninit was stored to memory at: [ 470.022003][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.027708][T12617] __msan_chain_origin+0x54/0xa0 [ 470.032679][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.037781][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.042720][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.047214][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.051879][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.057932][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.064087][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.069273][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.074123][T12617] do_SYSENTER_32+0x73/0x90 [ 470.078627][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.084957][T12617] [ 470.087265][T12617] Uninit was stored to memory at: [ 470.092261][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.097969][T12617] __msan_chain_origin+0x54/0xa0 [ 470.102905][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.109041][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.114923][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.119445][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.124114][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.130190][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.137455][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.142686][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.147540][T12617] do_SYSENTER_32+0x73/0x90 [ 470.152032][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.158370][T12617] [ 470.160680][T12617] Uninit was stored to memory at: [ 470.165680][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.171389][T12617] __msan_chain_origin+0x54/0xa0 [ 470.176313][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.181431][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.186352][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.190841][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.195521][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.201574][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.207765][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.212994][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.217846][T12617] do_SYSENTER_32+0x73/0x90 [ 470.222408][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.228760][T12617] [ 470.231093][T12617] Uninit was stored to memory at: [ 470.236122][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.241873][T12617] __msan_chain_origin+0x54/0xa0 [ 470.247010][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.252130][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.257075][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.261577][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.266254][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.272371][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.278533][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.283843][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.288696][T12617] do_SYSENTER_32+0x73/0x90 [ 470.293190][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.299533][T12617] [ 470.301848][T12617] Uninit was stored to memory at: [ 470.306864][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.312576][T12617] __msan_chain_origin+0x54/0xa0 [ 470.317523][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.322624][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.327548][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.332037][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.336705][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.342798][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.348948][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.354136][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.358976][T12617] do_SYSENTER_32+0x73/0x90 [ 470.363511][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.369827][T12617] [ 470.372132][T12617] Uninit was stored to memory at: [ 470.377151][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.382862][T12617] __msan_chain_origin+0x54/0xa0 [ 470.387783][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.392896][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.397819][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.402363][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.407038][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.413101][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.419270][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.424481][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.429319][T12617] do_SYSENTER_32+0x73/0x90 [ 470.433810][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.440158][T12617] [ 470.442472][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 470.449140][T12617] do_recvmmsg+0xbf/0x22d0 [ 470.453544][T12617] do_recvmmsg+0xbf/0x22d0 [ 470.675047][T12617] not chained 350000 origins [ 470.679906][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 470.688662][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.698723][T12617] Call Trace: [ 470.702027][T12617] dump_stack+0x24c/0x2e0 [ 470.706378][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 470.712121][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 470.717939][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 470.723997][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 470.728774][T12617] ? kmsan_get_metadata+0x116/0x180 [ 470.733965][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 470.739764][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 470.745853][T12617] ? kmsan_get_metadata+0x116/0x180 [ 470.751084][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 470.756754][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 470.762831][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 470.768131][T12617] ? _copy_from_user+0x1fd/0x300 [ 470.773065][T12617] __msan_chain_origin+0x54/0xa0 [ 470.777997][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.783132][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.788060][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.792560][T12617] ? kmsan_get_metadata+0x116/0x180 [ 470.797756][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 470.803574][T12617] ? kmsan_get_metadata+0x116/0x180 [ 470.808806][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 470.814441][T12617] ? __msan_poison_alloca+0xec/0x110 [ 470.819745][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 470.824513][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.829211][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.835279][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.841436][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.846635][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.851537][T12617] do_SYSENTER_32+0x73/0x90 [ 470.856055][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 470.862401][T12617] RIP: 0023:0xf7fe3549 [ 470.866462][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 470.886098][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 470.894545][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 470.902543][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 470.910541][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.924330][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 470.932776][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.940753][T12617] Uninit was stored to memory at: [ 470.945765][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 470.951513][T12617] __msan_chain_origin+0x54/0xa0 [ 470.956491][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 470.961680][T12617] get_compat_msghdr+0x108/0x2b0 [ 470.966612][T12617] do_recvmmsg+0xdc1/0x22d0 [ 470.971132][T12617] __sys_recvmmsg+0x519/0x6f0 [ 470.975801][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 470.981859][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 470.988020][T12617] __do_fast_syscall_32+0x127/0x180 [ 470.993231][T12617] do_fast_syscall_32+0x6a/0xc0 [ 470.998069][T12617] do_SYSENTER_32+0x73/0x90 [ 471.002577][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.008894][T12617] [ 471.011228][T12617] Uninit was stored to memory at: [ 471.016226][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.021935][T12617] __msan_chain_origin+0x54/0xa0 [ 471.026862][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.031985][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.036930][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.041428][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.046095][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.052187][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.058391][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.063677][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.068516][T12617] do_SYSENTER_32+0x73/0x90 [ 471.073138][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.079465][T12617] [ 471.081801][T12617] Uninit was stored to memory at: [ 471.086812][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.092585][T12617] __msan_chain_origin+0x54/0xa0 [ 471.097537][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.103381][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.108446][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.113079][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.118762][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.125162][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.131563][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.137958][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.143200][T12617] do_SYSENTER_32+0x73/0x90 [ 471.147715][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.154053][T12617] [ 471.156375][T12617] Uninit was stored to memory at: [ 471.161413][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.167140][T12617] __msan_chain_origin+0x54/0xa0 [ 471.172128][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.177239][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.182173][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.186685][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.191425][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.197506][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.203654][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.208850][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.213721][T12617] do_SYSENTER_32+0x73/0x90 [ 471.218249][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.224596][T12617] [ 471.226923][T12617] Uninit was stored to memory at: [ 471.231940][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.237757][T12617] __msan_chain_origin+0x54/0xa0 [ 471.242807][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.247996][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.252938][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.257445][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.262147][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.268213][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.274370][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.279585][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.284432][T12617] do_SYSENTER_32+0x73/0x90 [ 471.288950][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.295292][T12617] [ 471.297601][T12617] Uninit was stored to memory at: [ 471.302614][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.308343][T12617] __msan_chain_origin+0x54/0xa0 [ 471.313287][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.318413][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.323339][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.327942][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.332607][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.338662][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.344810][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.350024][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.354885][T12617] do_SYSENTER_32+0x73/0x90 [ 471.359381][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.365735][T12617] [ 471.368088][T12617] Uninit was stored to memory at: [ 471.373098][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.378818][T12617] __msan_chain_origin+0x54/0xa0 [ 471.383860][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.388974][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.393910][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.398414][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.403092][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.409163][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.415321][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.420536][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.425391][T12617] do_SYSENTER_32+0x73/0x90 [ 471.429925][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.436258][T12617] [ 471.438573][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 471.445229][T12617] do_recvmmsg+0xbf/0x22d0 [ 471.449669][T12617] do_recvmmsg+0xbf/0x22d0 [ 471.672591][T12617] not chained 360000 origins [ 471.677263][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 471.686116][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.696173][T12617] Call Trace: [ 471.699465][T12617] dump_stack+0x24c/0x2e0 [ 471.703838][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 471.709551][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 471.715392][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 471.721447][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 471.726204][T12617] ? kmsan_get_metadata+0x116/0x180 [ 471.731405][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 471.737201][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 471.743257][T12617] ? kmsan_get_metadata+0x116/0x180 [ 471.748459][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 471.754084][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 471.760156][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 471.765439][T12617] ? _copy_from_user+0x1fd/0x300 [ 471.770399][T12617] __msan_chain_origin+0x54/0xa0 [ 471.775359][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.780494][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.785434][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.789960][T12617] ? kmsan_get_metadata+0x116/0x180 [ 471.795168][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 471.801099][T12617] ? kmsan_get_metadata+0x116/0x180 [ 471.806334][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 471.812095][T12617] ? __msan_poison_alloca+0xec/0x110 [ 471.817406][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 471.822187][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.826866][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.832931][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.839083][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.844279][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.849135][T12617] do_SYSENTER_32+0x73/0x90 [ 471.853631][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.859948][T12617] RIP: 0023:0xf7fe3549 [ 471.864005][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 471.883609][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 471.892037][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 471.899998][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 471.907973][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.915947][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 471.923912][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.931874][T12617] Uninit was stored to memory at: [ 471.936876][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 471.942601][T12617] __msan_chain_origin+0x54/0xa0 [ 471.947525][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 471.952634][T12617] get_compat_msghdr+0x108/0x2b0 [ 471.957562][T12617] do_recvmmsg+0xdc1/0x22d0 [ 471.962080][T12617] __sys_recvmmsg+0x519/0x6f0 [ 471.966743][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 471.972805][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 471.978962][T12617] __do_fast_syscall_32+0x127/0x180 [ 471.984176][T12617] do_fast_syscall_32+0x6a/0xc0 [ 471.989015][T12617] do_SYSENTER_32+0x73/0x90 [ 471.993513][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 471.999832][T12617] [ 472.002141][T12617] Uninit was stored to memory at: [ 472.007226][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.012963][T12617] __msan_chain_origin+0x54/0xa0 [ 472.017903][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.023126][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.028117][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.032839][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.037517][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.043600][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.049756][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.054959][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.059819][T12617] do_SYSENTER_32+0x73/0x90 [ 472.064345][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.070692][T12617] [ 472.073001][T12617] Uninit was stored to memory at: [ 472.078012][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.083757][T12617] __msan_chain_origin+0x54/0xa0 [ 472.088712][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.093824][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.098756][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.103267][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.108175][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.114268][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.120713][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.125940][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.131014][T12617] do_SYSENTER_32+0x73/0x90 [ 472.135518][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.142352][T12617] [ 472.144678][T12617] Uninit was stored to memory at: [ 472.149699][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.155412][T12617] __msan_chain_origin+0x54/0xa0 [ 472.160355][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.165461][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.170416][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.174907][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.179578][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.185693][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.191845][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.197036][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.201890][T12617] do_SYSENTER_32+0x73/0x90 [ 472.206387][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.212762][T12617] [ 472.215073][T12617] Uninit was stored to memory at: [ 472.220141][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.225867][T12617] __msan_chain_origin+0x54/0xa0 [ 472.230800][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.235930][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.240859][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.245381][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.250077][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.256135][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.262280][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.267468][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.272309][T12617] do_SYSENTER_32+0x73/0x90 [ 472.276817][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.283146][T12617] [ 472.285472][T12617] Uninit was stored to memory at: [ 472.290488][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.296200][T12617] __msan_chain_origin+0x54/0xa0 [ 472.301130][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.306232][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.311157][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.315665][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.320343][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.326395][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.332540][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.337726][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.342592][T12617] do_SYSENTER_32+0x73/0x90 [ 472.347081][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.353413][T12617] [ 472.355718][T12617] Uninit was stored to memory at: [ 472.360720][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.366426][T12617] __msan_chain_origin+0x54/0xa0 [ 472.371352][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.376449][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.381379][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.385903][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.390601][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.396669][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.402820][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.408022][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.412875][T12617] do_SYSENTER_32+0x73/0x90 [ 472.417386][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.423724][T12617] [ 472.426034][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 472.432686][T12617] do_recvmmsg+0xbf/0x22d0 [ 472.437111][T12617] do_recvmmsg+0xbf/0x22d0 [ 472.644814][T12617] not chained 370000 origins [ 472.649471][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 472.658273][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.668335][T12617] Call Trace: [ 472.671602][T12617] dump_stack+0x24c/0x2e0 [ 472.675929][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 472.681656][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 472.687457][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 472.693515][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 472.698275][T12617] ? kmsan_get_metadata+0x116/0x180 [ 472.703467][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 472.709262][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 472.715333][T12617] ? kmsan_get_metadata+0x116/0x180 [ 472.720519][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 472.726138][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 472.732191][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 472.737462][T12617] ? _copy_from_user+0x1fd/0x300 [ 472.742388][T12617] __msan_chain_origin+0x54/0xa0 [ 472.747312][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.752442][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.757367][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.761878][T12617] ? kmsan_get_metadata+0x116/0x180 [ 472.767073][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 472.772867][T12617] ? kmsan_get_metadata+0x116/0x180 [ 472.778050][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 472.783680][T12617] ? __msan_poison_alloca+0xec/0x110 [ 472.788976][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 472.793735][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.798434][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.804500][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.810646][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.815852][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.820697][T12617] do_SYSENTER_32+0x73/0x90 [ 472.825189][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.831507][T12617] RIP: 0023:0xf7fe3549 [ 472.835559][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 472.855155][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 472.863569][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 472.871543][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 472.879516][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.887509][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 472.895472][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.903482][T12617] Uninit was stored to memory at: [ 472.908594][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.914320][T12617] __msan_chain_origin+0x54/0xa0 [ 472.919284][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.924402][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.929352][T12617] do_recvmmsg+0xdc1/0x22d0 [ 472.933876][T12617] __sys_recvmmsg+0x519/0x6f0 [ 472.938555][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 472.944636][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 472.950807][T12617] __do_fast_syscall_32+0x127/0x180 [ 472.955996][T12617] do_fast_syscall_32+0x6a/0xc0 [ 472.960838][T12617] do_SYSENTER_32+0x73/0x90 [ 472.965342][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 472.971665][T12617] [ 472.973988][T12617] Uninit was stored to memory at: [ 472.979003][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 472.984874][T12617] __msan_chain_origin+0x54/0xa0 [ 472.989809][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 472.994918][T12617] get_compat_msghdr+0x108/0x2b0 [ 472.999856][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.004359][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.009044][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.015120][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.021266][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.026471][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.031329][T12617] do_SYSENTER_32+0x73/0x90 [ 473.035838][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.042154][T12617] [ 473.044460][T12617] Uninit was stored to memory at: [ 473.049460][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.055164][T12617] __msan_chain_origin+0x54/0xa0 [ 473.060104][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.065212][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.070133][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.074623][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.079288][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.085343][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.091486][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.096675][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.101520][T12617] do_SYSENTER_32+0x73/0x90 [ 473.106284][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.113225][T12617] [ 473.115714][T12617] Uninit was stored to memory at: [ 473.120734][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.126629][T12617] __msan_chain_origin+0x54/0xa0 [ 473.132048][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.137477][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.142450][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.146959][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.151629][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.157689][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.163835][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.169026][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.173866][T12617] do_SYSENTER_32+0x73/0x90 [ 473.178356][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.184690][T12617] [ 473.186998][T12617] Uninit was stored to memory at: [ 473.191995][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.197728][T12617] __msan_chain_origin+0x54/0xa0 [ 473.202693][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.207943][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.212887][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.217379][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.222052][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.228175][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.234333][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.239555][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.244420][T12617] do_SYSENTER_32+0x73/0x90 [ 473.248917][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.255246][T12617] [ 473.257581][T12617] Uninit was stored to memory at: [ 473.262599][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.268312][T12617] __msan_chain_origin+0x54/0xa0 [ 473.273236][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.278351][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.283276][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.287764][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.292457][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.298515][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.304662][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.309878][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.314725][T12617] do_SYSENTER_32+0x73/0x90 [ 473.319214][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.325529][T12617] [ 473.327865][T12617] Uninit was stored to memory at: [ 473.332881][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.338585][T12617] __msan_chain_origin+0x54/0xa0 [ 473.343507][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.348604][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.353536][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.358032][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.362724][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.368798][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.374957][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.380147][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.385006][T12617] do_SYSENTER_32+0x73/0x90 [ 473.389504][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.395834][T12617] [ 473.398158][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 473.404914][T12617] do_recvmmsg+0xbf/0x22d0 [ 473.409351][T12617] do_recvmmsg+0xbf/0x22d0 [ 473.636249][T12617] not chained 380000 origins [ 473.640886][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 473.649637][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.659726][T12617] Call Trace: [ 473.663022][T12617] dump_stack+0x24c/0x2e0 [ 473.667355][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 473.673084][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 473.678966][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 473.685027][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 473.689824][T12617] ? kmsan_get_metadata+0x116/0x180 [ 473.695028][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 473.700824][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 473.706883][T12617] ? kmsan_get_metadata+0x116/0x180 [ 473.712137][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 473.717767][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 473.723875][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 473.729153][T12617] ? _copy_from_user+0x1fd/0x300 [ 473.734098][T12617] __msan_chain_origin+0x54/0xa0 [ 473.739024][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.744132][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.749062][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.753575][T12617] ? kmsan_get_metadata+0x116/0x180 [ 473.758764][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 473.764570][T12617] ? kmsan_get_metadata+0x116/0x180 [ 473.769784][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 473.775409][T12617] ? __msan_poison_alloca+0xec/0x110 [ 473.780698][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 473.785459][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.790158][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.796220][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.802363][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.807567][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.812412][T12617] do_SYSENTER_32+0x73/0x90 [ 473.816911][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.823257][T12617] RIP: 0023:0xf7fe3549 [ 473.827324][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 473.847058][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 473.855498][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 473.863468][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 473.871451][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.879606][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 473.887570][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.895540][T12617] Uninit was stored to memory at: [ 473.900571][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.906285][T12617] __msan_chain_origin+0x54/0xa0 [ 473.911234][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.916338][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.921271][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.925799][T12617] __sys_recvmmsg+0x519/0x6f0 [ 473.930523][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 473.936583][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 473.942745][T12617] __do_fast_syscall_32+0x127/0x180 [ 473.947933][T12617] do_fast_syscall_32+0x6a/0xc0 [ 473.952776][T12617] do_SYSENTER_32+0x73/0x90 [ 473.957268][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 473.963618][T12617] [ 473.965935][T12617] Uninit was stored to memory at: [ 473.970952][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 473.976664][T12617] __msan_chain_origin+0x54/0xa0 [ 473.981597][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 473.986716][T12617] get_compat_msghdr+0x108/0x2b0 [ 473.991696][T12617] do_recvmmsg+0xdc1/0x22d0 [ 473.996218][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.000902][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.006964][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.013141][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.018343][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.023223][T12617] do_SYSENTER_32+0x73/0x90 [ 474.027757][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.034123][T12617] [ 474.036434][T12617] Uninit was stored to memory at: [ 474.041441][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.047154][T12617] __msan_chain_origin+0x54/0xa0 [ 474.052105][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.057397][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.062322][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.066815][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.071506][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.077562][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.083704][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.088890][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.093732][T12617] do_SYSENTER_32+0x73/0x90 [ 474.098223][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.104577][T12617] [ 474.106900][T12617] Uninit was stored to memory at: [ 474.112298][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.122493][T12617] __msan_chain_origin+0x54/0xa0 [ 474.127449][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.133046][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.137979][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.142954][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.147972][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.154104][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.160255][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.165455][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.170440][T12617] do_SYSENTER_32+0x73/0x90 [ 474.174937][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.181264][T12617] [ 474.183595][T12617] Uninit was stored to memory at: [ 474.188597][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.194310][T12617] __msan_chain_origin+0x54/0xa0 [ 474.199275][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.204382][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.209329][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.213840][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.218557][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.224639][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.230858][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.236054][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.240984][T12617] do_SYSENTER_32+0x73/0x90 [ 474.245488][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.251846][T12617] [ 474.254160][T12617] Uninit was stored to memory at: [ 474.259166][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.265585][T12617] __msan_chain_origin+0x54/0xa0 [ 474.270545][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.275668][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.280636][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.285139][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.289868][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.295953][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.302102][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.307299][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.312170][T12617] do_SYSENTER_32+0x73/0x90 [ 474.317972][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.324317][T12617] [ 474.326647][T12617] Uninit was stored to memory at: [ 474.331708][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.337537][T12617] __msan_chain_origin+0x54/0xa0 [ 474.342600][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.347717][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.352690][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.357196][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.361960][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.368865][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.375261][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.380999][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.385867][T12617] do_SYSENTER_32+0x73/0x90 [ 474.390523][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.397029][T12617] [ 474.399395][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 474.406061][T12617] do_recvmmsg+0xbf/0x22d0 [ 474.410510][T12617] do_recvmmsg+0xbf/0x22d0 [ 474.632076][T12617] not chained 390000 origins [ 474.636894][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 474.646052][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.656408][T12617] Call Trace: [ 474.659806][T12617] dump_stack+0x24c/0x2e0 [ 474.664199][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 474.672494][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 474.678440][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 474.684690][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 474.689669][T12617] ? kmsan_get_metadata+0x116/0x180 [ 474.694871][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 474.700805][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 474.706959][T12617] ? kmsan_get_metadata+0x116/0x180 [ 474.712182][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 474.717813][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 474.723902][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 474.729182][T12617] ? _copy_from_user+0x1fd/0x300 [ 474.734424][T12617] __msan_chain_origin+0x54/0xa0 [ 474.739599][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.744762][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.749747][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.754255][T12617] ? kmsan_get_metadata+0x116/0x180 [ 474.759659][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 474.765505][T12617] ? kmsan_get_metadata+0x116/0x180 [ 474.770750][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 474.776425][T12617] ? __msan_poison_alloca+0xec/0x110 [ 474.782277][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 474.787304][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.792147][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.798348][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.804681][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.810062][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.814980][T12617] do_SYSENTER_32+0x73/0x90 [ 474.819483][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.825926][T12617] RIP: 0023:0xf7fe3549 [ 474.830080][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 474.849714][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 474.858152][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 474.866143][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 474.874130][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.882231][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 474.890695][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.898761][T12617] Uninit was stored to memory at: [ 474.904213][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.910099][T12617] __msan_chain_origin+0x54/0xa0 [ 474.915182][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.920357][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.925452][T12617] do_recvmmsg+0xdc1/0x22d0 [ 474.930121][T12617] __sys_recvmmsg+0x519/0x6f0 [ 474.935065][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 474.941249][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 474.947411][T12617] __do_fast_syscall_32+0x127/0x180 [ 474.952642][T12617] do_fast_syscall_32+0x6a/0xc0 [ 474.957497][T12617] do_SYSENTER_32+0x73/0x90 [ 474.962125][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 474.968696][T12617] [ 474.971017][T12617] Uninit was stored to memory at: [ 474.976121][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 474.982032][T12617] __msan_chain_origin+0x54/0xa0 [ 474.986981][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 474.992494][T12617] get_compat_msghdr+0x108/0x2b0 [ 474.997897][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.002423][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.007104][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.013234][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.019600][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.024810][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.029850][T12617] do_SYSENTER_32+0x73/0x90 [ 475.034363][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.040715][T12617] [ 475.043030][T12617] Uninit was stored to memory at: [ 475.048341][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.054096][T12617] __msan_chain_origin+0x54/0xa0 [ 475.059745][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.064977][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.070048][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.074652][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.079535][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.085747][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.091950][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.097243][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.102518][T12617] do_SYSENTER_32+0x73/0x90 [ 475.108088][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.117291][T12617] [ 475.119673][T12617] Uninit was stored to memory at: [ 475.125110][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.132037][T12617] __msan_chain_origin+0x54/0xa0 [ 475.139097][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.145014][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.150024][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.154554][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.159286][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.165473][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.171867][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.182184][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.187072][T12617] do_SYSENTER_32+0x73/0x90 [ 475.191653][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.198128][T12617] [ 475.200499][T12617] Uninit was stored to memory at: [ 475.205902][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.211985][T12617] __msan_chain_origin+0x54/0xa0 [ 475.217328][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.222478][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.227535][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.232212][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.237660][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.251199][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.257824][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.263193][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.268244][T12617] do_SYSENTER_32+0x73/0x90 [ 475.273321][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.279665][T12617] [ 475.282654][T12617] Uninit was stored to memory at: [ 475.288029][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.294991][T12617] __msan_chain_origin+0x54/0xa0 [ 475.301147][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.306284][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.311256][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.315990][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.321256][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.327466][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.333769][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.339305][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.344196][T12617] do_SYSENTER_32+0x73/0x90 [ 475.348922][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.355510][T12617] [ 475.357855][T12617] Uninit was stored to memory at: [ 475.362983][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.369218][T12617] __msan_chain_origin+0x54/0xa0 [ 475.374874][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.380219][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.385203][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.389761][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.394575][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.401007][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.407374][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.413496][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.418639][T12617] do_SYSENTER_32+0x73/0x90 [ 475.423165][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.430379][T12617] [ 475.432907][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 475.439877][T12617] do_recvmmsg+0xbf/0x22d0 [ 475.444314][T12617] do_recvmmsg+0xbf/0x22d0 [ 475.676023][T12617] not chained 400000 origins [ 475.681716][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 475.691878][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.701970][T12617] Call Trace: [ 475.705251][T12617] dump_stack+0x24c/0x2e0 [ 475.709581][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 475.715649][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 475.721452][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 475.728924][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 475.734145][T12617] ? kmsan_get_metadata+0x116/0x180 [ 475.739503][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 475.745603][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 475.751676][T12617] ? kmsan_get_metadata+0x116/0x180 [ 475.756877][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 475.762899][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 475.769277][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 475.774912][T12617] ? _copy_from_user+0x1fd/0x300 [ 475.780027][T12617] __msan_chain_origin+0x54/0xa0 [ 475.785002][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.790240][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.795335][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.799853][T12617] ? kmsan_get_metadata+0x116/0x180 [ 475.805047][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 475.811053][T12617] ? kmsan_get_metadata+0x116/0x180 [ 475.816495][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 475.822141][T12617] ? __msan_poison_alloca+0xec/0x110 [ 475.827611][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 475.832468][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.837966][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.844495][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.850807][T12617] __do_fast_syscall_32+0x127/0x180 [ 475.856306][T12617] do_fast_syscall_32+0x6a/0xc0 [ 475.861557][T12617] do_SYSENTER_32+0x73/0x90 [ 475.866089][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 475.872457][T12617] RIP: 0023:0xf7fe3549 [ 475.876680][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 475.896658][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 475.906005][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 475.915809][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 475.924121][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.933650][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 475.942512][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.951288][T12617] Uninit was stored to memory at: [ 475.957029][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 475.962763][T12617] __msan_chain_origin+0x54/0xa0 [ 475.967704][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 475.973151][T12617] get_compat_msghdr+0x108/0x2b0 [ 475.978190][T12617] do_recvmmsg+0xdc1/0x22d0 [ 475.982728][T12617] __sys_recvmmsg+0x519/0x6f0 [ 475.987451][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 475.993809][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 475.999976][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.005265][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.010389][T12617] do_SYSENTER_32+0x73/0x90 [ 476.014909][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.021496][T12617] [ 476.023826][T12617] Uninit was stored to memory at: [ 476.028914][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.034668][T12617] __msan_chain_origin+0x54/0xa0 [ 476.039745][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.045047][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.051492][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.056010][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.061099][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.067318][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.073489][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.078698][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.083552][T12617] do_SYSENTER_32+0x73/0x90 [ 476.088144][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.094483][T12617] [ 476.096873][T12617] Uninit was stored to memory at: [ 476.101918][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.108299][T12617] __msan_chain_origin+0x54/0xa0 [ 476.115368][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.121974][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.127534][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.133853][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.138909][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.146222][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.152762][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.158071][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.163018][T12617] do_SYSENTER_32+0x73/0x90 [ 476.167621][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.174046][T12617] [ 476.176562][T12617] Uninit was stored to memory at: [ 476.181597][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.187806][T12617] __msan_chain_origin+0x54/0xa0 [ 476.193320][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.198637][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.203581][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.208859][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.213549][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.220084][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.226524][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.231914][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.236906][T12617] do_SYSENTER_32+0x73/0x90 [ 476.241435][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.248007][T12617] [ 476.250721][T12617] Uninit was stored to memory at: [ 476.255826][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.261842][T12617] __msan_chain_origin+0x54/0xa0 [ 476.266790][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.272085][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.277033][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.281721][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.287147][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.293441][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.300143][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.305346][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.310193][T12617] do_SYSENTER_32+0x73/0x90 [ 476.314693][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.321288][T12617] [ 476.323608][T12617] Uninit was stored to memory at: [ 476.328616][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.334460][T12617] __msan_chain_origin+0x54/0xa0 [ 476.339546][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.344691][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.349846][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.354895][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.360658][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.367734][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.374555][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.380719][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.386807][T12617] do_SYSENTER_32+0x73/0x90 [ 476.391728][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.398419][T12617] [ 476.400808][T12617] Uninit was stored to memory at: [ 476.405941][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 476.412233][T12617] __msan_chain_origin+0x54/0xa0 [ 476.418691][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.424055][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.429400][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.434371][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.439300][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.445380][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.451541][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.456798][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.461652][T12617] do_SYSENTER_32+0x73/0x90 [ 476.466151][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.472475][T12617] [ 476.474788][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 476.481456][T12617] do_recvmmsg+0xbf/0x22d0 [ 476.485899][T12617] do_recvmmsg+0xbf/0x22d0 [ 476.742589][T12617] not chained 410000 origins [ 476.747327][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 476.756646][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.766740][T12617] Call Trace: [ 476.770039][T12617] dump_stack+0x24c/0x2e0 [ 476.775110][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 476.781063][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 476.788157][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 476.794543][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 476.799529][T12617] ? kmsan_get_metadata+0x116/0x180 [ 476.804755][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 476.810599][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 476.816868][T12617] ? kmsan_get_metadata+0x116/0x180 [ 476.822193][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 476.827864][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 476.834129][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 476.839439][T12617] ? _copy_from_user+0x1fd/0x300 [ 476.844425][T12617] __msan_chain_origin+0x54/0xa0 [ 476.849391][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 476.854741][T12617] get_compat_msghdr+0x108/0x2b0 [ 476.859724][T12617] do_recvmmsg+0xdc1/0x22d0 [ 476.864362][T12617] ? kmsan_get_metadata+0x116/0x180 [ 476.869594][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 476.876211][T12617] ? kmsan_get_metadata+0x116/0x180 [ 476.881534][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 476.888226][T12617] ? __msan_poison_alloca+0xec/0x110 [ 476.893556][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 476.898448][T12617] __sys_recvmmsg+0x519/0x6f0 [ 476.903146][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 476.909372][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 476.915556][T12617] __do_fast_syscall_32+0x127/0x180 [ 476.920824][T12617] do_fast_syscall_32+0x6a/0xc0 [ 476.925695][T12617] do_SYSENTER_32+0x73/0x90 [ 476.930215][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 476.936645][T12617] RIP: 0023:0xf7fe3549 [ 476.940723][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 476.960828][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 476.969745][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 476.977727][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 476.985794][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.994249][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 477.002388][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.010533][T12617] Uninit was stored to memory at: [ 477.015563][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.021311][T12617] __msan_chain_origin+0x54/0xa0 [ 477.026530][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.031659][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.037867][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.042470][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.047860][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.054164][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.060507][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.065723][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.070583][T12617] do_SYSENTER_32+0x73/0x90 [ 477.075095][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.081437][T12617] [ 477.083759][T12617] Uninit was stored to memory at: [ 477.088899][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.094665][T12617] __msan_chain_origin+0x54/0xa0 [ 477.099747][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.105407][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.111052][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.118044][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.123815][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.130027][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.137630][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.145045][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.150598][T12617] do_SYSENTER_32+0x73/0x90 [ 477.155139][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.161487][T12617] [ 477.163867][T12617] Uninit was stored to memory at: [ 477.168900][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.174829][T12617] __msan_chain_origin+0x54/0xa0 [ 477.179810][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.184962][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.190099][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.194635][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.199327][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.205561][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.211913][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.217702][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.222778][T12617] do_SYSENTER_32+0x73/0x90 [ 477.227327][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.234091][T12617] [ 477.236479][T12617] Uninit was stored to memory at: [ 477.241931][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.248223][T12617] __msan_chain_origin+0x54/0xa0 [ 477.253412][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.259283][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.264252][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.268773][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.273608][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.279714][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.285895][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.291114][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.295982][T12617] do_SYSENTER_32+0x73/0x90 [ 477.300616][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.306955][T12617] [ 477.309274][T12617] Uninit was stored to memory at: [ 477.314286][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.320024][T12617] __msan_chain_origin+0x54/0xa0 [ 477.325062][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.330182][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.335161][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.339673][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.344392][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.350473][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.356636][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.361934][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.366797][T12617] do_SYSENTER_32+0x73/0x90 [ 477.371323][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.377782][T12617] [ 477.380298][T12617] Uninit was stored to memory at: [ 477.385458][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.391628][T12617] __msan_chain_origin+0x54/0xa0 [ 477.396600][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.401852][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.406818][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.411428][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.416124][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.422207][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.428477][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.433779][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.439081][T12617] do_SYSENTER_32+0x73/0x90 [ 477.443629][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.450248][T12617] [ 477.452794][T12617] Uninit was stored to memory at: [ 477.458276][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 477.464172][T12617] __msan_chain_origin+0x54/0xa0 [ 477.469149][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.474412][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.479771][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.484292][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.488997][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 477.495094][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 477.501272][T12617] __do_fast_syscall_32+0x127/0x180 [ 477.506669][T12617] do_fast_syscall_32+0x6a/0xc0 [ 477.511917][T12617] do_SYSENTER_32+0x73/0x90 [ 477.516433][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 477.523574][T12617] [ 477.525924][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 477.532678][T12617] do_recvmmsg+0xbf/0x22d0 [ 477.537228][T12617] do_recvmmsg+0xbf/0x22d0 [ 477.840112][T12617] not chained 420000 origins [ 477.844946][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 477.853706][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.863764][T12617] Call Trace: [ 477.867045][T12617] dump_stack+0x24c/0x2e0 [ 477.871414][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 477.877135][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 477.883096][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 477.889401][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 477.894296][T12617] ? kmsan_get_metadata+0x116/0x180 [ 477.899541][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 477.905348][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 477.911412][T12617] ? kmsan_get_metadata+0x116/0x180 [ 477.916612][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 477.922251][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 477.928317][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 477.933596][T12617] ? _copy_from_user+0x1fd/0x300 [ 477.938615][T12617] __msan_chain_origin+0x54/0xa0 [ 477.943742][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 477.948856][T12617] get_compat_msghdr+0x108/0x2b0 [ 477.953878][T12617] do_recvmmsg+0xdc1/0x22d0 [ 477.958378][T12617] ? kmsan_get_metadata+0x116/0x180 [ 477.963571][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 477.969396][T12617] ? kmsan_get_metadata+0x116/0x180 [ 477.974617][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 477.980241][T12617] ? __msan_poison_alloca+0xec/0x110 [ 477.985522][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 477.990280][T12617] __sys_recvmmsg+0x519/0x6f0 [ 477.995132][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.001199][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.007386][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.012595][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.017444][T12617] do_SYSENTER_32+0x73/0x90 [ 478.022159][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.028507][T12617] RIP: 0023:0xf7fe3549 [ 478.032566][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 478.052165][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 478.060574][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 478.068540][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 478.076618][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.085212][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 478.093261][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.101252][T12617] Uninit was stored to memory at: [ 478.106369][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.119240][T12617] __msan_chain_origin+0x54/0xa0 [ 478.124751][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.130120][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.135123][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.140518][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.145589][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.151670][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.157879][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.163107][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.167955][T12617] do_SYSENTER_32+0x73/0x90 [ 478.172452][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.178777][T12617] [ 478.181090][T12617] Uninit was stored to memory at: [ 478.186091][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.191832][T12617] __msan_chain_origin+0x54/0xa0 [ 478.196822][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.202300][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.208240][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.212756][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.217434][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.223552][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.229751][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.235051][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.239918][T12617] do_SYSENTER_32+0x73/0x90 [ 478.244426][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.250756][T12617] [ 478.253083][T12617] Uninit was stored to memory at: [ 478.258089][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.263809][T12617] __msan_chain_origin+0x54/0xa0 [ 478.268787][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.273950][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.278999][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.283498][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.288475][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.295157][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.301375][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.306595][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.311467][T12617] do_SYSENTER_32+0x73/0x90 [ 478.315969][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.322302][T12617] [ 478.324634][T12617] Uninit was stored to memory at: [ 478.329662][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.335377][T12617] __msan_chain_origin+0x54/0xa0 [ 478.340309][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.345630][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.350572][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.355066][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.359733][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.365967][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.372117][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.377308][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.382178][T12617] do_SYSENTER_32+0x73/0x90 [ 478.386702][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.393030][T12617] [ 478.395378][T12617] Uninit was stored to memory at: [ 478.400386][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.406365][T12617] __msan_chain_origin+0x54/0xa0 [ 478.411414][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.416531][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.421467][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.425978][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.430706][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.436773][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.443013][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.448388][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.453344][T12617] do_SYSENTER_32+0x73/0x90 [ 478.457865][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.464192][T12617] [ 478.466508][T12617] Uninit was stored to memory at: [ 478.471533][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.477269][T12617] __msan_chain_origin+0x54/0xa0 [ 478.482350][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.487553][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.492810][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.497316][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.501992][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.508095][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.514338][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.519576][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.524447][T12617] do_SYSENTER_32+0x73/0x90 [ 478.529102][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.535784][T12617] [ 478.538108][T12617] Uninit was stored to memory at: [ 478.543138][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 478.548887][T12617] __msan_chain_origin+0x54/0xa0 [ 478.553824][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.559569][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.564519][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.569029][T12617] __sys_recvmmsg+0x519/0x6f0 [ 478.573799][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 478.579880][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 478.586040][T12617] __do_fast_syscall_32+0x127/0x180 [ 478.591456][T12617] do_fast_syscall_32+0x6a/0xc0 [ 478.596548][T12617] do_SYSENTER_32+0x73/0x90 [ 478.601052][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 478.607395][T12617] [ 478.609881][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 478.616636][T12617] do_recvmmsg+0xbf/0x22d0 [ 478.621059][T12617] do_recvmmsg+0xbf/0x22d0 [ 478.845679][T12617] not chained 430000 origins [ 478.850438][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 478.859322][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.869383][T12617] Call Trace: [ 478.872790][T12617] dump_stack+0x24c/0x2e0 [ 478.877177][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 478.882895][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 478.888876][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 478.895068][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 478.899842][T12617] ? kmsan_get_metadata+0x116/0x180 [ 478.905089][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 478.910919][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 478.917101][T12617] ? kmsan_get_metadata+0x116/0x180 [ 478.922330][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 478.927987][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 478.934167][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 478.939481][T12617] ? _copy_from_user+0x1fd/0x300 [ 478.944595][T12617] __msan_chain_origin+0x54/0xa0 [ 478.949591][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 478.954709][T12617] get_compat_msghdr+0x108/0x2b0 [ 478.959675][T12617] do_recvmmsg+0xdc1/0x22d0 [ 478.964184][T12617] ? kmsan_get_metadata+0x116/0x180 [ 478.969421][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 478.975271][T12617] ? kmsan_get_metadata+0x116/0x180 [ 478.980465][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 478.986097][T12617] ? __msan_poison_alloca+0xec/0x110 [ 478.991408][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 478.996171][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.000852][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.007047][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.013313][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.018513][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.023390][T12617] do_SYSENTER_32+0x73/0x90 [ 479.027891][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.034260][T12617] RIP: 0023:0xf7fe3549 [ 479.038322][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 479.057940][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 479.066364][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 479.074360][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 479.083683][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.091649][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 479.099617][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.107697][T12617] Uninit was stored to memory at: [ 479.115502][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.122828][T12617] __msan_chain_origin+0x54/0xa0 [ 479.127919][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.133500][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.139492][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.144167][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.148896][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.155002][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.161159][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.166362][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.171242][T12617] do_SYSENTER_32+0x73/0x90 [ 479.175746][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.182072][T12617] [ 479.184390][T12617] Uninit was stored to memory at: [ 479.189411][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.195164][T12617] __msan_chain_origin+0x54/0xa0 [ 479.200164][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.205286][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.210250][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.214754][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.219520][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.225848][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.232357][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.237562][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.242418][T12617] do_SYSENTER_32+0x73/0x90 [ 479.246928][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.253292][T12617] [ 479.255697][T12617] Uninit was stored to memory at: [ 479.260735][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.266457][T12617] __msan_chain_origin+0x54/0xa0 [ 479.271417][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.276769][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.281842][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.286356][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.291063][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.297135][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.303320][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.308576][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.313431][T12617] do_SYSENTER_32+0x73/0x90 [ 479.317928][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.324255][T12617] [ 479.326573][T12617] Uninit was stored to memory at: [ 479.331595][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.337338][T12617] __msan_chain_origin+0x54/0xa0 [ 479.342298][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.347408][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.352401][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.356904][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.361584][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.367688][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.373849][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.379090][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.383962][T12617] do_SYSENTER_32+0x73/0x90 [ 479.388462][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.394790][T12617] [ 479.397104][T12617] Uninit was stored to memory at: [ 479.402109][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.407835][T12617] __msan_chain_origin+0x54/0xa0 [ 479.412774][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.418036][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.422980][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.427493][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.432425][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.438493][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.444767][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.450004][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.454929][T12617] do_SYSENTER_32+0x73/0x90 [ 479.459434][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.465763][T12617] [ 479.468089][T12617] Uninit was stored to memory at: [ 479.473126][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.478868][T12617] __msan_chain_origin+0x54/0xa0 [ 479.483824][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.488938][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.494480][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.498982][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.503651][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.509711][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.515871][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.521172][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.526019][T12617] do_SYSENTER_32+0x73/0x90 [ 479.530572][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.536921][T12617] [ 479.539237][T12617] Uninit was stored to memory at: [ 479.544262][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 479.550151][T12617] __msan_chain_origin+0x54/0xa0 [ 479.555115][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.560249][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.565182][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.569725][T12617] __sys_recvmmsg+0x519/0x6f0 [ 479.574406][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 479.580508][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 479.586658][T12617] __do_fast_syscall_32+0x127/0x180 [ 479.591888][T12617] do_fast_syscall_32+0x6a/0xc0 [ 479.596739][T12617] do_SYSENTER_32+0x73/0x90 [ 479.601238][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 479.607554][T12617] [ 479.609861][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 479.616511][T12617] do_recvmmsg+0xbf/0x22d0 [ 479.620932][T12617] do_recvmmsg+0xbf/0x22d0 [ 479.849103][T12617] not chained 440000 origins [ 479.853750][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 479.862505][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.872600][T12617] Call Trace: [ 479.875876][T12617] dump_stack+0x24c/0x2e0 [ 479.880215][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 479.885928][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 479.891753][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 479.897808][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 479.902587][T12617] ? kmsan_get_metadata+0x116/0x180 [ 479.907795][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 479.913591][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 479.919644][T12617] ? kmsan_get_metadata+0x116/0x180 [ 479.924837][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 479.930493][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 479.936572][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 479.941870][T12617] ? _copy_from_user+0x1fd/0x300 [ 479.946802][T12617] __msan_chain_origin+0x54/0xa0 [ 479.951760][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 479.956871][T12617] get_compat_msghdr+0x108/0x2b0 [ 479.961803][T12617] do_recvmmsg+0xdc1/0x22d0 [ 479.966344][T12617] ? kmsan_get_metadata+0x116/0x180 [ 479.971577][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 479.977391][T12617] ? kmsan_get_metadata+0x116/0x180 [ 479.982600][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 479.988237][T12617] ? __msan_poison_alloca+0xec/0x110 [ 479.993543][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 479.998295][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.002966][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.009028][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.015173][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.020375][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.025239][T12617] do_SYSENTER_32+0x73/0x90 [ 480.029769][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.036098][T12617] RIP: 0023:0xf7fe3549 [ 480.040173][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 480.059775][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 480.068194][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 480.076193][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 480.084171][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.092145][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 480.100105][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.108097][T12617] Uninit was stored to memory at: [ 480.113119][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.119410][T12617] __msan_chain_origin+0x54/0xa0 [ 480.124641][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.129854][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.135048][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.139952][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.144757][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.150856][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.157494][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.162780][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.167639][T12617] do_SYSENTER_32+0x73/0x90 [ 480.172256][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.178601][T12617] [ 480.180931][T12617] Uninit was stored to memory at: [ 480.185937][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.191701][T12617] __msan_chain_origin+0x54/0xa0 [ 480.196644][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.201742][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.206677][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.211404][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.216076][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.222156][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.228367][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.233568][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.238427][T12617] do_SYSENTER_32+0x73/0x90 [ 480.242933][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.249277][T12617] [ 480.251590][T12617] Uninit was stored to memory at: [ 480.256589][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.262297][T12617] __msan_chain_origin+0x54/0xa0 [ 480.267225][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.272352][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.277287][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.281779][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.286447][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.292545][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.298695][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.303893][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.308736][T12617] do_SYSENTER_32+0x73/0x90 [ 480.313284][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.319630][T12617] [ 480.321942][T12617] Uninit was stored to memory at: [ 480.326963][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.332704][T12617] __msan_chain_origin+0x54/0xa0 [ 480.337636][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.342743][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.347683][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.352175][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.356854][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.362908][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.369052][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.374265][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.379122][T12617] do_SYSENTER_32+0x73/0x90 [ 480.383616][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.389945][T12617] [ 480.392265][T12617] Uninit was stored to memory at: [ 480.397279][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.403002][T12617] __msan_chain_origin+0x54/0xa0 [ 480.407926][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.413033][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.418012][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.422555][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.427230][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.433376][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.439546][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.444742][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.449622][T12617] do_SYSENTER_32+0x73/0x90 [ 480.454127][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.460444][T12617] [ 480.462768][T12617] Uninit was stored to memory at: [ 480.467788][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.473509][T12617] __msan_chain_origin+0x54/0xa0 [ 480.478460][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.483574][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.488499][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.493005][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.497669][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.503740][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.509888][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.515079][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.519924][T12617] do_SYSENTER_32+0x73/0x90 [ 480.524421][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.530768][T12617] [ 480.533073][T12617] Uninit was stored to memory at: [ 480.538072][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 480.543781][T12617] __msan_chain_origin+0x54/0xa0 [ 480.548729][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.553831][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.558757][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.563252][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.567943][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.574013][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.580171][T12617] __do_fast_syscall_32+0x127/0x180 [ 480.585370][T12617] do_fast_syscall_32+0x6a/0xc0 [ 480.590250][T12617] do_SYSENTER_32+0x73/0x90 [ 480.594745][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 480.601106][T12617] [ 480.603429][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 480.610078][T12617] do_recvmmsg+0xbf/0x22d0 [ 480.614503][T12617] do_recvmmsg+0xbf/0x22d0 [ 480.832460][T12617] not chained 450000 origins [ 480.837096][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 480.845849][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.855934][T12617] Call Trace: [ 480.859222][T12617] dump_stack+0x24c/0x2e0 [ 480.863549][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 480.869256][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 480.875168][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 480.881251][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 480.886040][T12617] ? kmsan_get_metadata+0x116/0x180 [ 480.891271][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 480.897093][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 480.903155][T12617] ? kmsan_get_metadata+0x116/0x180 [ 480.908353][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 480.913988][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 480.920053][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 480.925342][T12617] ? _copy_from_user+0x1fd/0x300 [ 480.930298][T12617] __msan_chain_origin+0x54/0xa0 [ 480.935233][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 480.940368][T12617] get_compat_msghdr+0x108/0x2b0 [ 480.945305][T12617] do_recvmmsg+0xdc1/0x22d0 [ 480.949853][T12617] ? kmsan_get_metadata+0x116/0x180 [ 480.955062][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 480.960913][T12617] ? kmsan_get_metadata+0x116/0x180 [ 480.966104][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 480.971729][T12617] ? __msan_poison_alloca+0xec/0x110 [ 480.977005][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 480.981768][T12617] __sys_recvmmsg+0x519/0x6f0 [ 480.986457][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 480.992556][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 480.998714][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.003911][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.008858][T12617] do_SYSENTER_32+0x73/0x90 [ 481.013356][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.019681][T12617] RIP: 0023:0xf7fe3549 [ 481.023743][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 481.043366][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 481.051798][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 481.059768][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 481.067787][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.075756][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 481.083757][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.091746][T12617] Uninit was stored to memory at: [ 481.096755][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.102576][T12617] __msan_chain_origin+0x54/0xa0 [ 481.107652][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.113203][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.118570][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.123699][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.128975][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.135068][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.141382][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.146594][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.151460][T12617] do_SYSENTER_32+0x73/0x90 [ 481.155957][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.162307][T12617] [ 481.164624][T12617] Uninit was stored to memory at: [ 481.169649][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.175366][T12617] __msan_chain_origin+0x54/0xa0 [ 481.180315][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.185423][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.190383][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.194908][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.199609][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.205681][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.211919][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.217124][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.221973][T12617] do_SYSENTER_32+0x73/0x90 [ 481.226476][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.232805][T12617] [ 481.235122][T12617] Uninit was stored to memory at: [ 481.240153][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.245873][T12617] __msan_chain_origin+0x54/0xa0 [ 481.250825][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.255937][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.260888][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.265382][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.270073][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.276133][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.282290][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.287483][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.292335][T12617] do_SYSENTER_32+0x73/0x90 [ 481.296865][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.303476][T12617] [ 481.305795][T12617] Uninit was stored to memory at: [ 481.310914][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.316641][T12617] __msan_chain_origin+0x54/0xa0 [ 481.321587][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.326686][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.331613][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.336125][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.340795][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.346850][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.353099][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.358318][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.363165][T12617] do_SYSENTER_32+0x73/0x90 [ 481.367659][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.373999][T12617] [ 481.376322][T12617] Uninit was stored to memory at: [ 481.381336][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.387060][T12617] __msan_chain_origin+0x54/0xa0 [ 481.392716][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.397827][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.402791][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.407310][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.411991][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.418060][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.424231][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.429434][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.434280][T12617] do_SYSENTER_32+0x73/0x90 [ 481.438793][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.445122][T12617] [ 481.447446][T12617] Uninit was stored to memory at: [ 481.452446][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.458158][T12617] __msan_chain_origin+0x54/0xa0 [ 481.463086][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.468187][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.473114][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.477608][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.482274][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.488335][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.494483][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.499702][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.504593][T12617] do_SYSENTER_32+0x73/0x90 [ 481.509113][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.515454][T12617] [ 481.517789][T12617] Uninit was stored to memory at: [ 481.522787][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 481.528494][T12617] __msan_chain_origin+0x54/0xa0 [ 481.533435][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.538553][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.543500][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.547996][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.552668][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.558728][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.564884][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.570121][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.574989][T12617] do_SYSENTER_32+0x73/0x90 [ 481.579511][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 481.585836][T12617] [ 481.588164][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 481.594828][T12617] do_recvmmsg+0xbf/0x22d0 [ 481.599294][T12617] do_recvmmsg+0xbf/0x22d0 [ 481.812944][T12617] not chained 460000 origins [ 481.817587][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 481.826368][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.836436][T12617] Call Trace: [ 481.839722][T12617] dump_stack+0x24c/0x2e0 [ 481.844081][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 481.849819][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 481.855651][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 481.861740][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 481.866535][T12617] ? kmsan_get_metadata+0x116/0x180 [ 481.872968][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 481.878794][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 481.884885][T12617] ? kmsan_get_metadata+0x116/0x180 [ 481.890100][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 481.895751][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 481.902364][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 481.907672][T12617] ? _copy_from_user+0x1fd/0x300 [ 481.912635][T12617] __msan_chain_origin+0x54/0xa0 [ 481.917606][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 481.922766][T12617] get_compat_msghdr+0x108/0x2b0 [ 481.927729][T12617] do_recvmmsg+0xdc1/0x22d0 [ 481.932260][T12617] ? kmsan_get_metadata+0x116/0x180 [ 481.937484][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 481.943311][T12617] ? kmsan_get_metadata+0x116/0x180 [ 481.948550][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 481.954174][T12617] ? __msan_poison_alloca+0xec/0x110 [ 481.959464][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 481.964233][T12617] __sys_recvmmsg+0x519/0x6f0 [ 481.968903][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 481.974972][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 481.981143][T12617] __do_fast_syscall_32+0x127/0x180 [ 481.986333][T12617] do_fast_syscall_32+0x6a/0xc0 [ 481.991185][T12617] do_SYSENTER_32+0x73/0x90 [ 481.995679][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.002043][T12617] RIP: 0023:0xf7fe3549 [ 482.006111][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 482.025712][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 482.034124][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 482.042103][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 482.050075][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.058036][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 482.066009][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.073972][T12617] Uninit was stored to memory at: [ 482.078990][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.084721][T12617] __msan_chain_origin+0x54/0xa0 [ 482.089657][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.094760][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.099713][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.104206][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.109165][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.115873][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.122480][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.127681][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.132536][T12617] do_SYSENTER_32+0x73/0x90 [ 482.137088][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.143470][T12617] [ 482.145787][T12617] Uninit was stored to memory at: [ 482.150790][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.156531][T12617] __msan_chain_origin+0x54/0xa0 [ 482.161512][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.166617][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.171560][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.176061][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.180757][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.186830][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.192974][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.198178][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.203017][T12617] do_SYSENTER_32+0x73/0x90 [ 482.207532][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.213856][T12617] [ 482.216182][T12617] Uninit was stored to memory at: [ 482.221199][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.226910][T12617] __msan_chain_origin+0x54/0xa0 [ 482.231834][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.236954][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.241905][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.246413][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.251178][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.257243][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.263520][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.268722][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.273658][T12617] do_SYSENTER_32+0x73/0x90 [ 482.278160][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.284488][T12617] [ 482.286810][T12617] Uninit was stored to memory at: [ 482.291821][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.297533][T12617] __msan_chain_origin+0x54/0xa0 [ 482.302461][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.307672][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.312612][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.317150][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.321845][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.327921][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.334081][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.339287][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.344130][T12617] do_SYSENTER_32+0x73/0x90 [ 482.348621][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.354947][T12617] [ 482.357272][T12617] Uninit was stored to memory at: [ 482.362283][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.367994][T12617] __msan_chain_origin+0x54/0xa0 [ 482.372916][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.378014][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.382939][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.387437][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.392125][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.398189][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.404348][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.409568][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.414426][T12617] do_SYSENTER_32+0x73/0x90 [ 482.418945][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.425307][T12617] [ 482.427634][T12617] Uninit was stored to memory at: [ 482.432632][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.438368][T12617] __msan_chain_origin+0x54/0xa0 [ 482.443298][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.448396][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.453320][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.457814][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.462484][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.468541][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.474710][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.479957][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.484798][T12617] do_SYSENTER_32+0x73/0x90 [ 482.489308][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.495627][T12617] [ 482.497946][T12617] Uninit was stored to memory at: [ 482.502945][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 482.508665][T12617] __msan_chain_origin+0x54/0xa0 [ 482.513607][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.518728][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.523661][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.528182][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.532859][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.538918][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.545064][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.550254][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.555180][T12617] do_SYSENTER_32+0x73/0x90 [ 482.559715][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.566052][T12617] [ 482.568359][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 482.575964][T12617] do_recvmmsg+0xbf/0x22d0 [ 482.580391][T12617] do_recvmmsg+0xbf/0x22d0 [ 482.789723][T12617] not chained 470000 origins [ 482.794347][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 482.803129][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.813191][T12617] Call Trace: [ 482.816473][T12617] dump_stack+0x24c/0x2e0 [ 482.820876][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 482.826635][T12617] ? do_user_addr_fault+0x1912/0x2650 [ 482.832069][T12617] ? kmsan_get_metadata+0x116/0x180 [ 482.837275][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 482.843069][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 482.849125][T12617] ? kmsan_get_metadata+0x116/0x180 [ 482.854316][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 482.859973][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 482.866036][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 482.871355][T12617] ? _copy_from_user+0x1fd/0x300 [ 482.876297][T12617] __msan_chain_origin+0x54/0xa0 [ 482.881222][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 482.886331][T12617] get_compat_msghdr+0x108/0x2b0 [ 482.891282][T12617] do_recvmmsg+0xdc1/0x22d0 [ 482.895787][T12617] ? kmsan_get_metadata+0x116/0x180 [ 482.901033][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 482.906835][T12617] ? kmsan_get_metadata+0x116/0x180 [ 482.912129][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 482.917764][T12617] ? __msan_poison_alloca+0xec/0x110 [ 482.923043][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 482.927809][T12617] __sys_recvmmsg+0x519/0x6f0 [ 482.932490][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 482.938582][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 482.944739][T12617] __do_fast_syscall_32+0x127/0x180 [ 482.949959][T12617] do_fast_syscall_32+0x6a/0xc0 [ 482.954813][T12617] do_SYSENTER_32+0x73/0x90 [ 482.959354][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 482.965685][T12617] RIP: 0023:0xf7fe3549 [ 482.969771][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 482.989376][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 482.997788][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 483.005754][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 483.013731][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.021694][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 483.029655][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.037631][T12617] Uninit was stored to memory at: [ 483.042639][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.048374][T12617] __msan_chain_origin+0x54/0xa0 [ 483.053317][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.058435][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.063363][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.067875][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.072541][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.078613][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.084759][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.089974][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.094816][T12617] do_SYSENTER_32+0x73/0x90 [ 483.099335][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.105663][T12617] [ 483.108124][T12617] Uninit was stored to memory at: [ 483.113132][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.119251][T12617] __msan_chain_origin+0x54/0xa0 [ 483.124943][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.130194][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.135141][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.139715][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.144583][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.150705][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.156874][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.162087][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.166927][T12617] do_SYSENTER_32+0x73/0x90 [ 483.171422][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.177739][T12617] [ 483.180046][T12617] Uninit was stored to memory at: [ 483.185050][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.190791][T12617] __msan_chain_origin+0x54/0xa0 [ 483.195717][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.200817][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.205743][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.210277][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.214945][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.221030][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.227179][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.232401][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.237259][T12617] do_SYSENTER_32+0x73/0x90 [ 483.241922][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.248251][T12617] [ 483.250567][T12617] Uninit was stored to memory at: [ 483.255583][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.261299][T12617] __msan_chain_origin+0x54/0xa0 [ 483.266232][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.271369][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.276307][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.280808][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.285493][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.291582][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.297747][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.302946][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.307790][T12617] do_SYSENTER_32+0x73/0x90 [ 483.312287][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.318616][T12617] [ 483.320925][T12617] Uninit was stored to memory at: [ 483.325927][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.331661][T12617] __msan_chain_origin+0x54/0xa0 [ 483.336603][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.341719][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.346692][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.351224][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.355895][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.361957][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.368108][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.373301][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.378157][T12617] do_SYSENTER_32+0x73/0x90 [ 483.382651][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.388970][T12617] [ 483.391281][T12617] Uninit was stored to memory at: [ 483.396286][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.401997][T12617] __msan_chain_origin+0x54/0xa0 [ 483.406932][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.412313][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.417248][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.421742][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.426534][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.432772][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.438937][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.444154][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.449128][T12617] do_SYSENTER_32+0x73/0x90 [ 483.453681][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.460003][T12617] [ 483.462329][T12617] Uninit was stored to memory at: [ 483.467334][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 483.473049][T12617] __msan_chain_origin+0x54/0xa0 [ 483.477976][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.483090][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.488041][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.492553][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.497235][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.503302][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.509452][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.514656][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.519528][T12617] do_SYSENTER_32+0x73/0x90 [ 483.524032][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.530362][T12617] [ 483.532677][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 483.539329][T12617] do_recvmmsg+0xbf/0x22d0 [ 483.543758][T12617] do_recvmmsg+0xbf/0x22d0 [ 483.756441][T12617] not chained 480000 origins [ 483.761277][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 483.770030][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.780078][T12617] Call Trace: [ 483.783364][T12617] dump_stack+0x24c/0x2e0 [ 483.787713][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 483.793424][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 483.799218][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 483.805277][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 483.810074][T12617] ? kmsan_get_metadata+0x116/0x180 [ 483.815294][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 483.821104][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 483.827161][T12617] ? kmsan_get_metadata+0x116/0x180 [ 483.832348][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 483.838067][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 483.844146][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 483.849419][T12617] ? _copy_from_user+0x1fd/0x300 [ 483.854355][T12617] __msan_chain_origin+0x54/0xa0 [ 483.859398][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 483.864536][T12617] get_compat_msghdr+0x108/0x2b0 [ 483.869504][T12617] do_recvmmsg+0xdc1/0x22d0 [ 483.874000][T12617] ? kmsan_get_metadata+0x116/0x180 [ 483.879188][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 483.884987][T12617] ? kmsan_get_metadata+0x116/0x180 [ 483.890212][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 483.895837][T12617] ? __msan_poison_alloca+0xec/0x110 [ 483.901109][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 483.905894][T12617] __sys_recvmmsg+0x519/0x6f0 [ 483.910612][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 483.916673][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 483.922825][T12617] __do_fast_syscall_32+0x127/0x180 [ 483.928036][T12617] do_fast_syscall_32+0x6a/0xc0 [ 483.932880][T12617] do_SYSENTER_32+0x73/0x90 [ 483.937380][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 483.943731][T12617] RIP: 0023:0xf7fe3549 [ 483.947800][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 483.967402][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 483.975811][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 483.983773][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 483.991745][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.999708][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 484.007684][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.015663][T12617] Uninit was stored to memory at: [ 484.020667][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.026389][T12617] __msan_chain_origin+0x54/0xa0 [ 484.031452][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.036573][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.041508][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.046014][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.050708][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.056782][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.062959][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.068157][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.072997][T12617] do_SYSENTER_32+0x73/0x90 [ 484.077487][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.083807][T12617] [ 484.086118][T12617] Uninit was stored to memory at: [ 484.091132][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.096869][T12617] __msan_chain_origin+0x54/0xa0 [ 484.101794][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.107213][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.112352][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.117596][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.123782][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.129866][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.136078][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.141810][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.146938][T12617] do_SYSENTER_32+0x73/0x90 [ 484.151495][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.157914][T12617] [ 484.160224][T12617] Uninit was stored to memory at: [ 484.165255][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.170996][T12617] __msan_chain_origin+0x54/0xa0 [ 484.175920][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.181018][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.185947][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.190471][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.195141][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.201197][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.207788][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.213250][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.218192][T12617] do_SYSENTER_32+0x73/0x90 [ 484.222799][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.229128][T12617] [ 484.231459][T12617] Uninit was stored to memory at: [ 484.236457][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.242169][T12617] __msan_chain_origin+0x54/0xa0 [ 484.247103][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.252237][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.257183][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.262059][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.266762][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.272904][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.279058][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.284252][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.289632][T12617] do_SYSENTER_32+0x73/0x90 [ 484.294152][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.300481][T12617] [ 484.302787][T12617] Uninit was stored to memory at: [ 484.307795][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.313519][T12617] __msan_chain_origin+0x54/0xa0 [ 484.318524][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.323630][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.328557][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.333052][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.337717][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.343790][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.349946][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.355143][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.359978][T12617] do_SYSENTER_32+0x73/0x90 [ 484.365252][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.371701][T12617] [ 484.374011][T12617] Uninit was stored to memory at: [ 484.379016][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.384830][T12617] __msan_chain_origin+0x54/0xa0 [ 484.389858][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.395051][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.399999][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.404502][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.409209][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.415273][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.422113][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.427309][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.432179][T12617] do_SYSENTER_32+0x73/0x90 [ 484.436845][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.443171][T12617] [ 484.445826][T12617] Uninit was stored to memory at: [ 484.451020][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 484.456918][T12617] __msan_chain_origin+0x54/0xa0 [ 484.461847][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.466961][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.471926][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.476447][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.481204][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.487451][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.493638][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.498836][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.503700][T12617] do_SYSENTER_32+0x73/0x90 [ 484.508252][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.514860][T12617] [ 484.517173][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 484.524019][T12617] do_recvmmsg+0xbf/0x22d0 [ 484.528444][T12617] do_recvmmsg+0xbf/0x22d0 [ 484.771466][T12617] not chained 490000 origins [ 484.776105][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 484.784895][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.794937][T12617] Call Trace: [ 484.798202][T12617] dump_stack+0x24c/0x2e0 [ 484.802523][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 484.808227][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 484.814020][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 484.820083][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 484.824919][T12617] ? kmsan_get_metadata+0x116/0x180 [ 484.830361][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 484.836152][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 484.842207][T12617] ? kmsan_get_metadata+0x116/0x180 [ 484.847391][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 484.853029][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 484.859776][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 484.865047][T12617] ? _copy_from_user+0x1fd/0x300 [ 484.869972][T12617] __msan_chain_origin+0x54/0xa0 [ 484.874893][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 484.879995][T12617] get_compat_msghdr+0x108/0x2b0 [ 484.884930][T12617] do_recvmmsg+0xdc1/0x22d0 [ 484.889457][T12617] ? kmsan_get_metadata+0x116/0x180 [ 484.894658][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 484.900452][T12617] ? kmsan_get_metadata+0x116/0x180 [ 484.905636][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 484.911277][T12617] ? __msan_poison_alloca+0xec/0x110 [ 484.916544][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 484.921296][T12617] __sys_recvmmsg+0x519/0x6f0 [ 484.925959][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 484.932030][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 484.938184][T12617] __do_fast_syscall_32+0x127/0x180 [ 484.943371][T12617] do_fast_syscall_32+0x6a/0xc0 [ 484.948654][T12617] do_SYSENTER_32+0x73/0x90 [ 484.953144][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 484.959471][T12617] RIP: 0023:0xf7fe3549 [ 484.963620][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.983242][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 484.992173][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 485.001621][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 485.009692][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.017831][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 485.025989][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.034246][T12617] Uninit was stored to memory at: [ 485.039256][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.045067][T12617] __msan_chain_origin+0x54/0xa0 [ 485.050005][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.055104][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.060026][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.064534][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.069211][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.075264][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.081421][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.086639][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.091491][T12617] do_SYSENTER_32+0x73/0x90 [ 485.095982][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.102561][T12617] [ 485.105665][T12617] Uninit was stored to memory at: [ 485.113546][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.121068][T12617] __msan_chain_origin+0x54/0xa0 [ 485.127351][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.132560][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.138901][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.144150][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.148854][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.154920][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.161068][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.166271][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.171220][T12617] do_SYSENTER_32+0x73/0x90 [ 485.175732][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.182331][T12617] [ 485.184656][T12617] Uninit was stored to memory at: [ 485.189686][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.195484][T12617] __msan_chain_origin+0x54/0xa0 [ 485.200543][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.205922][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.210983][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.215490][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.220170][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.226234][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.232381][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.237571][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.242504][T12617] do_SYSENTER_32+0x73/0x90 [ 485.247100][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.253431][T12617] [ 485.255749][T12617] Uninit was stored to memory at: [ 485.260759][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.266494][T12617] __msan_chain_origin+0x54/0xa0 [ 485.271425][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.276536][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.281559][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.286052][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.290744][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.296813][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.303051][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.308330][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.313208][T12617] do_SYSENTER_32+0x73/0x90 [ 485.317816][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.324141][T12617] [ 485.326451][T12617] Uninit was stored to memory at: [ 485.331453][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.337167][T12617] __msan_chain_origin+0x54/0xa0 [ 485.342183][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.347303][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.352226][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.356722][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.361384][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.367457][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.373894][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.379094][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.383954][T12617] do_SYSENTER_32+0x73/0x90 [ 485.388460][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.394816][T12617] [ 485.397157][T12617] Uninit was stored to memory at: [ 485.402168][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.407889][T12617] __msan_chain_origin+0x54/0xa0 [ 485.412926][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.418416][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.423444][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.427938][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.432609][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.438668][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.444826][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.450016][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.455289][T12617] do_SYSENTER_32+0x73/0x90 [ 485.459780][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.466199][T12617] [ 485.468515][T12617] Uninit was stored to memory at: [ 485.473534][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 485.479254][T12617] __msan_chain_origin+0x54/0xa0 [ 485.484180][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 485.489280][T12617] get_compat_msghdr+0x108/0x2b0 [ 485.494229][T12617] do_recvmmsg+0xdc1/0x22d0 [ 485.498758][T12617] __sys_recvmmsg+0x519/0x6f0 [ 485.503606][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 485.509677][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 485.515830][T12617] __do_fast_syscall_32+0x127/0x180 [ 485.521479][T12617] do_fast_syscall_32+0x6a/0xc0 [ 485.526728][T12617] do_SYSENTER_32+0x73/0x90 [ 485.531612][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 485.538185][T12617] [ 485.540625][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 485.547924][T12617] do_recvmmsg+0xbf/0x22d0 [ 485.552877][T12617] do_recvmmsg+0xbf/0x22d0 [ 485.946470][T12617] not chained 500000 origins [ 485.951124][T12617] CPU: 1 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 485.959914][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.969992][T12617] Call Trace: [ 485.973289][T12617] dump_stack+0x24c/0x2e0 [ 485.977651][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 485.983389][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 485.989217][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 485.995315][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 486.000116][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.005364][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 486.011206][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.017294][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.022519][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 486.028172][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 486.034266][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 486.039582][T12617] ? _copy_from_user+0x1fd/0x300 [ 486.044540][T12617] __msan_chain_origin+0x54/0xa0 [ 486.049501][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.054639][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.059606][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.064167][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.069390][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 486.075217][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.080442][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 486.086090][T12617] ? __msan_poison_alloca+0xec/0x110 [ 486.091390][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 486.096174][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.100879][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.106976][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.113522][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.118779][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.123658][T12617] do_SYSENTER_32+0x73/0x90 [ 486.128189][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.134547][T12617] RIP: 0023:0xf7fe3549 [ 486.138635][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.158272][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 486.166713][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 486.174710][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 486.182709][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.190725][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.198714][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.206708][T12617] Uninit was stored to memory at: [ 486.211743][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.217487][T12617] __msan_chain_origin+0x54/0xa0 [ 486.222444][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.227577][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.232536][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.237056][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.241756][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.247850][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.254032][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.259266][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.264147][T12617] do_SYSENTER_32+0x73/0x90 [ 486.268814][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.275176][T12617] [ 486.277505][T12617] Uninit was stored to memory at: [ 486.282525][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.288268][T12617] __msan_chain_origin+0x54/0xa0 [ 486.293230][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.298365][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.303320][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.307859][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.312586][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.318671][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.324847][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.330062][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.334931][T12617] do_SYSENTER_32+0x73/0x90 [ 486.339455][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.345803][T12617] [ 486.348128][T12617] Uninit was stored to memory at: [ 486.353148][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.358889][T12617] __msan_chain_origin+0x54/0xa0 [ 486.363848][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.368983][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.373944][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.378493][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.383189][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.389279][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.395459][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.400693][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.405566][T12617] do_SYSENTER_32+0x73/0x90 [ 486.410093][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.416445][T12617] [ 486.418773][T12617] Uninit was stored to memory at: [ 486.423794][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.429576][T12617] __msan_chain_origin+0x54/0xa0 [ 486.434544][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.439685][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.444649][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.449184][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.453879][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.459969][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.466144][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.471395][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.476244][T12617] do_SYSENTER_32+0x73/0x90 [ 486.480941][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.487266][T12617] [ 486.489591][T12617] Uninit was stored to memory at: [ 486.494593][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.500348][T12617] __msan_chain_origin+0x54/0xa0 [ 486.505290][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.510400][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.515362][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.519892][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.524621][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.530740][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.536906][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.542132][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.546999][T12617] do_SYSENTER_32+0x73/0x90 [ 486.551509][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.557831][T12617] [ 486.560142][T12617] Uninit was stored to memory at: [ 486.565142][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.570853][T12617] __msan_chain_origin+0x54/0xa0 [ 486.574572][ T9276] Bluetooth: hci5: command 0x0406 tx timeout [ 486.575778][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.575818][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.591874][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.596408][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.601107][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.607196][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.613376][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.618605][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.623522][T12617] do_SYSENTER_32+0x73/0x90 [ 486.628052][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.634407][T12617] [ 486.636735][T12617] Uninit was stored to memory at: [ 486.641754][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 486.647499][T12617] __msan_chain_origin+0x54/0xa0 [ 486.652452][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 486.657583][T12617] get_compat_msghdr+0x108/0x2b0 [ 486.662538][T12617] do_recvmmsg+0xdc1/0x22d0 [ 486.667063][T12617] __sys_recvmmsg+0x519/0x6f0 [ 486.671847][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 486.678897][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 486.685079][T12617] __do_fast_syscall_32+0x127/0x180 [ 486.690306][T12617] do_fast_syscall_32+0x6a/0xc0 [ 486.695180][T12617] do_SYSENTER_32+0x73/0x90 [ 486.699705][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.706060][T12617] [ 486.708386][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 486.715159][T12617] do_recvmmsg+0xbf/0x22d0 [ 486.719597][T12617] do_recvmmsg+0xbf/0x22d0 [ 486.898063][T12617] not chained 510000 origins [ 486.902826][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 486.911581][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.921643][T12617] Call Trace: [ 486.924920][T12617] dump_stack+0x24c/0x2e0 [ 486.929275][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 486.934988][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 486.940782][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 486.946857][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 486.951633][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.956823][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 486.962616][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 486.968696][T12617] ? kmsan_get_metadata+0x116/0x180 [ 486.973894][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 486.979527][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 486.985604][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 486.990892][T12617] ? _copy_from_user+0x1fd/0x300 [ 486.995834][T12617] __msan_chain_origin+0x54/0xa0 [ 487.000756][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.005871][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.010798][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.015297][T12617] ? kmsan_get_metadata+0x116/0x180 [ 487.020484][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 487.026281][T12617] ? kmsan_get_metadata+0x116/0x180 [ 487.031507][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 487.037134][T12617] ? __msan_poison_alloca+0xec/0x110 [ 487.042420][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 487.047178][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.051863][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.057921][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.064078][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.069286][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.074127][T12617] do_SYSENTER_32+0x73/0x90 [ 487.078625][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.084952][T12617] RIP: 0023:0xf7fe3549 [ 487.089011][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 487.108837][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 487.117337][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 487.125671][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 487.133788][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.142460][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 487.150434][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.158402][T12617] Uninit was stored to memory at: [ 487.163409][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.169143][T12617] __msan_chain_origin+0x54/0xa0 [ 487.174085][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.179204][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.184127][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.188632][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.193320][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.199376][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.205519][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.210769][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.215623][T12617] do_SYSENTER_32+0x73/0x90 [ 487.220138][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.226462][T12617] [ 487.228773][T12617] Uninit was stored to memory at: [ 487.233778][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.239494][T12617] __msan_chain_origin+0x54/0xa0 [ 487.244437][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.249540][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.254474][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.258997][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.263693][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.270022][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.276186][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.281379][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.286244][T12617] do_SYSENTER_32+0x73/0x90 [ 487.290759][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.297074][T12617] [ 487.299396][T12617] Uninit was stored to memory at: [ 487.304414][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.310121][T12617] __msan_chain_origin+0x54/0xa0 [ 487.315041][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.320142][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.325065][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.329571][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.334266][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.340352][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.346503][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.351689][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.356525][T12617] do_SYSENTER_32+0x73/0x90 [ 487.361018][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.367332][T12617] [ 487.369751][T12617] Uninit was stored to memory at: [ 487.374750][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.380471][T12617] __msan_chain_origin+0x54/0xa0 [ 487.385394][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.390524][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.395459][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.399959][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.404654][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.410718][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.416884][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.422097][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.426960][T12617] do_SYSENTER_32+0x73/0x90 [ 487.431460][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.437886][T12617] [ 487.440223][T12617] Uninit was stored to memory at: [ 487.445228][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.450941][T12617] __msan_chain_origin+0x54/0xa0 [ 487.455884][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.460998][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.465921][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.470429][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.475091][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.481145][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.487285][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.492485][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.497322][T12617] do_SYSENTER_32+0x73/0x90 [ 487.501829][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.508142][T12617] [ 487.510451][T12617] Uninit was stored to memory at: [ 487.515547][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.521262][T12617] __msan_chain_origin+0x54/0xa0 [ 487.526193][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.531316][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.536259][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.540779][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.545451][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.551506][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.557649][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.562837][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.567674][T12617] do_SYSENTER_32+0x73/0x90 [ 487.572169][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.578485][T12617] [ 487.580808][T12617] Uninit was stored to memory at: [ 487.585821][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 487.591528][T12617] __msan_chain_origin+0x54/0xa0 [ 487.596466][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.601650][T12617] get_compat_msghdr+0x108/0x2b0 [ 487.606572][T12617] do_recvmmsg+0xdc1/0x22d0 [ 487.611059][T12617] __sys_recvmmsg+0x519/0x6f0 [ 487.615722][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 487.621791][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 487.627933][T12617] __do_fast_syscall_32+0x127/0x180 [ 487.633121][T12617] do_fast_syscall_32+0x6a/0xc0 [ 487.637957][T12617] do_SYSENTER_32+0x73/0x90 [ 487.642453][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.648801][T12617] [ 487.651108][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 487.657758][T12617] do_recvmmsg+0xbf/0x22d0 [ 487.662162][T12617] do_recvmmsg+0xbf/0x22d0 [ 487.891630][T12617] not chained 520000 origins [ 487.896259][T12617] CPU: 0 PID: 12617 Comm: syz-executor.0 Not tainted 5.12.0-rc6-syzkaller #0 [ 487.905014][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.915070][T12617] Call Trace: [ 487.918353][T12617] dump_stack+0x24c/0x2e0 [ 487.922706][T12617] kmsan_internal_chain_origin+0x6f/0x130 [ 487.928448][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 487.934265][T12617] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 487.940440][T12617] ? udp_recvmsg+0x1ecd/0x23c0 [ 487.945211][T12617] ? kmsan_get_metadata+0x116/0x180 [ 487.950439][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 487.956278][T12617] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 487.962337][T12617] ? kmsan_get_metadata+0x116/0x180 [ 487.967521][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 487.973138][T12617] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 487.979292][T12617] ? kmsan_unpoison_shadow+0x74/0xa0 [ 487.984566][T12617] ? _copy_from_user+0x1fd/0x300 [ 487.989492][T12617] __msan_chain_origin+0x54/0xa0 [ 487.994419][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 487.999524][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.004449][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.008957][T12617] ? kmsan_get_metadata+0x116/0x180 [ 488.014141][T12617] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 488.019933][T12617] ? kmsan_get_metadata+0x116/0x180 [ 488.025133][T12617] ? kmsan_internal_set_origin+0x85/0xc0 [ 488.030752][T12617] ? __msan_poison_alloca+0xec/0x110 [ 488.036047][T12617] ? __sys_recvmmsg+0xb5/0x6f0 [ 488.040814][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.045485][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.051661][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.057838][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.063032][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.067870][T12617] do_SYSENTER_32+0x73/0x90 [ 488.072361][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.078690][T12617] RIP: 0023:0xf7fe3549 [ 488.082760][T12617] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.102367][T12617] RSP: 002b:00000000f55dd5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 488.110895][T12617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 488.119656][T12617] RDX: 00000000006fdaec RSI: 0000000000000022 RDI: 0000000000000000 [ 488.128045][T12617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.136019][T12617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 488.143998][T12617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.151984][T12617] Uninit was stored to memory at: [ 488.156989][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.162719][T12617] __msan_chain_origin+0x54/0xa0 [ 488.167658][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.172764][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.177722][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.182236][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.186915][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.192985][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.199143][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.204332][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.209187][T12617] do_SYSENTER_32+0x73/0x90 [ 488.213686][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.220003][T12617] [ 488.222311][T12617] Uninit was stored to memory at: [ 488.227307][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.233028][T12617] __msan_chain_origin+0x54/0xa0 [ 488.237949][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.243053][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.247990][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.252527][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.257205][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.263319][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.269467][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.274659][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.279498][T12617] do_SYSENTER_32+0x73/0x90 [ 488.283996][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.290312][T12617] [ 488.292633][T12617] Uninit was stored to memory at: [ 488.297634][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.303342][T12617] __msan_chain_origin+0x54/0xa0 [ 488.308265][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.313379][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.318390][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.322882][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.327558][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.333620][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.339803][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.345038][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.349881][T12617] do_SYSENTER_32+0x73/0x90 [ 488.354375][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.360692][T12617] [ 488.363000][T12617] Uninit was stored to memory at: [ 488.367999][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.373767][T12617] __msan_chain_origin+0x54/0xa0 [ 488.378700][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.383808][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.388744][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.393245][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.397931][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.403987][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.410127][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.415336][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.420210][T12617] do_SYSENTER_32+0x73/0x90 [ 488.424713][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.431045][T12617] [ 488.433362][T12617] Uninit was stored to memory at: [ 488.438363][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.444091][T12617] __msan_chain_origin+0x54/0xa0 [ 488.449014][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.454128][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.459052][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.463545][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.468218][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.474291][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.480458][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.485646][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.490483][T12617] do_SYSENTER_32+0x73/0x90 [ 488.494972][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.501288][T12617] [ 488.503606][T12617] Uninit was stored to memory at: [ 488.508604][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.514312][T12617] __msan_chain_origin+0x54/0xa0 [ 488.519261][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.524364][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.529308][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.533798][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.538462][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.544522][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.550662][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.555849][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.560688][T12617] do_SYSENTER_32+0x73/0x90 [ 488.565181][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.571501][T12617] [ 488.573805][T12617] Uninit was stored to memory at: [ 488.578816][T12617] kmsan_internal_chain_origin+0xad/0x130 [ 488.584540][T12617] __msan_chain_origin+0x54/0xa0 [ 488.589461][T12617] __get_compat_msghdr+0x6db/0x9d0 [ 488.594559][T12617] get_compat_msghdr+0x108/0x2b0 [ 488.599501][T12617] do_recvmmsg+0xdc1/0x22d0 [ 488.603995][T12617] __sys_recvmmsg+0x519/0x6f0 [ 488.608686][T12617] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 488.614765][T12617] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 488.623189][T12617] __do_fast_syscall_32+0x127/0x180 [ 488.628396][T12617] do_fast_syscall_32+0x6a/0xc0 [ 488.633249][T12617] do_SYSENTER_32+0x73/0x90 [ 488.637741][T12617] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 488.644066][T12617] [ 488.646373][T12617] Local variable ----msg_sys@do_recvmmsg created at: [ 488.653025][T12617] do_recvmmsg+0xbf/0x22d0 [ 488.657431][T12617] do_recvmmsg+0xbf/0x22d0 19:17:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @sctp_ip6_spec={@empty, @empty}, {0x0, @random="6ed566bb3d1b"}, @esp_ip4_spec={@empty, @broadcast}, {0x0, @multicast}}}}) 19:17:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:17:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9, 0x1, 'plug\x00'}, {0xc, 0x2, {0x1}}}]}, 0x3c}}, 0x0) [ 489.327869][ T1173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:17:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 19:17:57 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000080), 0x4) 19:17:57 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:17:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x730c5256932cae39, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa, 0x1, 'ipoib\x00'}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) [ 489.764773][T12696] overlayfs: overlapping lowerdir path [ 490.112093][ T1173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.193892][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.227939][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.237690][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.249221][T12691] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:17:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 490.655336][ T1173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:17:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) [ 490.747954][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:17:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:17:58 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)='#', 0x1}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r2}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) [ 491.267185][ T1173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.333991][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 491.348907][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.359727][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.370883][T12710] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.529762][T12716] team0: Device lo is loopback device. Loopback devices can't be added as a team port 19:17:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) [ 491.869256][T12734] overlayfs: overlapping lowerdir path [ 491.923975][T12735] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 491.969964][T12734] overlayfs: failed to resolve './file1': -2 [ 496.224855][ T1173] device hsr_slave_0 left promiscuous mode [ 496.246269][ T1173] device hsr_slave_1 left promiscuous mode [ 496.271969][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.280172][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.297527][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.305418][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.326687][ T1173] device bridge_slave_1 left promiscuous mode [ 496.333509][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.352098][ T1173] device bridge_slave_0 left promiscuous mode [ 496.359203][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.415721][ T1173] device veth1_macvtap left promiscuous mode [ 496.421906][ T1173] device veth0_macvtap left promiscuous mode [ 496.428489][ T1173] device veth1_vlan left promiscuous mode [ 496.434667][ T1173] device veth0_vlan left promiscuous mode [ 499.809805][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 499.824154][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 499.841708][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.864825][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.986667][ T1173] bond0 (unregistering): Released all slaves [ 500.813347][T12778] IPVS: ftp: loaded support on port[0] = 21 [ 501.121910][T12778] chnl_net:caif_netlink_parms(): no params data found [ 501.317547][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.325244][T12778] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.335296][T12778] device bridge_slave_0 entered promiscuous mode [ 501.353675][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.361240][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.373365][T12778] device bridge_slave_1 entered promiscuous mode [ 501.416789][T12778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.430851][T12778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.484074][T12778] team0: Port device team_slave_0 added [ 501.494178][T12778] team0: Port device team_slave_1 added [ 501.531208][T12778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.538477][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.565142][T12778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.582647][T12778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.589999][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.616433][T12778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.666802][T12778] device hsr_slave_0 entered promiscuous mode [ 501.677995][T12778] device hsr_slave_1 entered promiscuous mode [ 501.898743][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.906013][T12778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.913549][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.921180][T12778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.018317][T12778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.042005][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.053457][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.066317][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.083752][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 502.110070][T12778] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.126732][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.136939][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.146649][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.153902][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.179101][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.192515][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.202512][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.210258][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.219263][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.243216][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.262130][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.275813][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.289414][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.308651][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.318911][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.338529][ T9276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.348350][ T9276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.369451][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.379157][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.399567][T12778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.436860][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.444972][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.463934][T12778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.574245][ T9276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.585068][ T9276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.623894][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.633391][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.648726][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.659990][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.673295][T12778] device veth0_vlan entered promiscuous mode [ 502.698871][T12778] device veth1_vlan entered promiscuous mode [ 502.744998][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.754123][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.764142][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.773468][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.785388][T12778] device veth0_macvtap entered promiscuous mode [ 502.808013][T12778] device veth1_macvtap entered promiscuous mode [ 502.828455][T11498] Bluetooth: hci0: command 0x0409 tx timeout [ 502.844007][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.855189][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.865685][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.876367][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.886575][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.897502][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.907623][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.918291][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.928460][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.939132][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.953059][T12778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.968348][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.977342][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.986790][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.996220][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.018927][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.030014][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.040231][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.050901][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.060978][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.071673][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.081762][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.092446][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.102528][T12778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.114348][T12778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.128448][T12778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.145648][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.155687][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.405373][ T379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.413389][ T379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.421809][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 503.539514][ T453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.547671][ T453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.569679][T11498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:18:11 executing program 0: wait4(0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x4}) 19:18:11 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000100)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r0) io_setup(0x201, &(0x7f0000000300)) io_submit(0x0, 0x0, &(0x7f0000000200)) 19:18:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:11 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x80002, 0x0) dup2(r1, r0) 19:18:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 19:18:11 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(0x0, &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) [ 504.051699][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.064507][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.075135][T13018] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.186373][T13016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cf27aab8"}, 0x0, 0x0, @fd}) 19:18:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0x0, "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"}) 19:18:12 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x0, 0x800005}, 0x0, 0x800000, 0x1f, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 0: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d) 19:18:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 504.909124][T11498] Bluetooth: hci0: command 0x041b tx timeout 19:18:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) 19:18:13 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000d40)) [ 505.286992][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.299415][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.310001][T13042] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:13 executing program 0: clone(0x100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x15, &(0x7f0000000100)) ptrace(0x10, r0) ptrace(0x11, r1) [ 505.629012][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 505.782357][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:13 executing program 4: r0 = socket$inet6(0x10, 0x80000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="5500000018007f2500fe01b2a4a280930a600080fea84302910000003900090020000c00040000000d0005006480000700000a001a3ad5570800c78b8008230115130be2f38152c1a4c2027a9d110085b176673200", 0x55}], 0x1}, 0x0) 19:18:13 executing program 0: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xffffffff}) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mlock(&(0x7f0000004000/0x3000)=nil, 0x3000) [ 506.238162][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.249354][T13059] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.975159][ T18] Bluetooth: hci0: command 0x040f tx timeout 19:18:14 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(0x0, &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) 19:18:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 507.762484][T13082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:15 executing program 5: r0 = socket$netlink(0x11, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@qipcrtr={0x11, 0x6}, 0x80) write(r0, &(0x7f0000000180)="4ab4d0720600000000018da53a5ee40000440808000000500000000000000000000000000096318d", 0x28) 19:18:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f2ff000009000100666c6f7700000000400002003c000b800800010006000000300002802c00010000000900000000000b000200706f6c6963790000080001"], 0x70}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="2be00d43b704bf420131a4d0b069132b3552d7bebf5714b76dc427cc722c51ce900f8858fa20d5803354ff3fb425815929741b7cddd5e663e14a243df198f10b7057077ef517b40be12d13cdc87ce53d7f921e3010e421ff0d0e5ea3dc329a65fd71bdf7cd29c17391c1406824746150aa9fccc850667f98e18f17ae166ad03344570d8060a57604eb3953e3129f1bc5b6066393ba3dfbcc3c3bd84a2b0d1416cdd3d62ee83598429c6b699dc66814b6a45c5248f3800a7a00b25794b7b56cd4087e386d35dab480573e62e429a601a7b9b0f3897fd6a8ac9b1284f6028d1bab7740c231f14144d12e4d1a3216478d5421c9e03af70325d6d3ddd53de9c93aeb87bbe6b8b0900e4878353e6d60348371a89f440148211b43731692b90b63ba042426a1b05db0afa1514b2bdb3c68b18b3170a9dccd4a7169ce88dd7a0cf7b54ad073c5055b8b96f235bd5468d6e1e17b48e796fae69bddc884ccaeb1f6142bc64eb02c1f47619424e2b2145e0e650f4a6606b1fb9acebeeaac855a27f6cd5d83c947fc02596d6251c55252133b87bfc9f1df2e0d35584178bb462183890db89e52864587feb022733562286b31ff4633af150cc5808c036fb924b5eb1198a25227426fabe28150c3e20c705d1b03d2c99b39d06f10ca8394f7907f896a3d0f901d40da9003a4c432d9a30724edcbaf9a2177767d1fa26fbe9558914554153c730a5d03e7fb8413a35b5f1e3ae207130158d321374fe08979cd2bdd2fcaccdb089309672cbaf982df8917f39a0f9387a9ba4ecc67c715dfbb01afd29fb2008c16ed0f3adedf3c48a27f2c65bd52d44e4f8ee0ca940fcfab1790e9dcc5b2accf0d5b562b4efea5dddff9289c5e1b09406019266eeb775c1801e80a7e878a5f33a05aef5fac1b6f4ff23eabc50f4d772687f7e4c4dad740d1439be99044ab2c922f21f95d2325ea6422a5ce13e9006f4b373171b7556c1faf30829406059ecc6444a56c0ddaef42009430fa8cd95f72e84df2f40bc01162193153fabb87c7eb361620a9ba301587ce6fce4b7492298603c59681d395cefe70006eb2ed323202e27d6df7a55fb3b7e50b29fff558ae68cbe1cf5da6f76706fe1356b2f4d6ef4edc1c80914057120360e0b82f0f07d5cb7395b98693e70263a51df10d0ef5282a3fffe97d80bea90be60d081be1e9e73f55ade0cd4a31e104131c7f55694e878dbfd60a75997b241e17234dcf573cfa351e78aca057736f19e950f58ce1a7c2d60e6587bad6cc9b26fe6a4c14e6bbf03ceb651004cc2cf68dd81d7a1c26d10702c2f7fbbdea20666e330601f05267268da7db17b8f344bf03b2e8ef53800afd2b3699e75d91feb7004492e296f2146aad16cb4b5768a7a8ae2dac1a8b2182a7bdf5b294eff6652e74b3df84a60df60e86b528f64fb6f08857ff89b6efcefe9fe124564cdc08d245f071a663961d1f317936919379bd26ebb6279e30dfeb06f051bbf3243f088978b7c9e120c60f0fd9c1177756500151219698577137b97a45e45b90d59317968bc7967fc0f932fcc1d7c460765ffa9f6119c97c669a6135ff24b25f0be3b445b5f5a86e7b9d8f4c569a8f18a92bade95bae97e54f2bfe2109d63db28114cc126cf1f97268e927f13b497fc8b354229de17ae2ff191fb398bc7c52d8754ae2ab693f2f5849e0da78a5555151d8c551faef1185c3f0ddb50413f69a03324306f2ea9de2ac118bb29c143d8c4fbf5649085bcf012c9d611e7d749d4d71baaa038317f8a06c57df9a6eface45ed9759cacea6ffb84fc815eab822a1b6d6215473dcdaec7aa558cad8ce6dea1956c7033174f2f520f33b6a9bbceb96bedcfea053ac68eb4b5898bcb84a79d89eade730ff1aeb92e91cdbdb4dd7fb10d83820108016d9ef0566a3e5cae20048aaf212a929e695fcc80431ae2b64ffa35531581cbead574624f37c5cf20f9ecb0582bcb1db1b4bb308ff216f737e9a32b610a9ea83bfecbb8e4f155e33d3ec7c6bf63914fbcf76110feb8077df501c7a4968453412cba9c888ea1bfb099bd7112a32a5bf7bc4b07c5baeaeb32f6106652b5cc7724076180735d3934719b039326e46a389b7760cd3edd839f333747222a2130a9623e42e593a4e41831d0eb95f035d7586d6fa10f0161a887db1a171bdc540aa8179303cd905b93f1b7c1145ca7dce8f159832df8cd569f9d9d4d5f9a38401b35901e8753687038a2d7e0669026109336648fc5a969866e3ba3f60086f8a329cde962d8f9e716dc2e8d15c5eb038ce87d700096dd979bc5571e469c3249ef6ce1a7b6ed607a32b9b4fce5dde3635e8ab1543aa647fe555d26763e36059be2ac1c53a54d3159429c5317f4d40b2aa0c60aa3ca45685130087ced878b8480d418a50ab87960c90d0e4b273a027e0dbc0c83fd474e47245ef857c3008bf8a713516590531b958ebd74c3d0085fb967ed587745b9b24b0ec84ff9168238677e4f05b709c2368054556c161e46ebef1ea56682c34055f1159546df51bd98a0c3878a858323f39404960fb63f657f7c30e9e05fc7c6842c29df596f51f8f07e0cdaf11960882cfc239e7f4ab75e81385f24458fc615cb877632464a9abf2a4b7741cb337ea60f5fb02f0467e29392e4d5d218c66ad3c2c47ed3a82ada1f4fd14875a23fbb3daf6e77ed1862e3f5154dd7b66f9008f6d63f7fade95360bbaf49c123489ffc2ac96afd77e118bb2ddbbff06a65ac1e025e7bc326f0413087b5d18eacb1de1c115945bebb6e651b0d9c1633b1feab33640845e11c27f0f1772447d1233dd86ed2cba0966c24b788ccfd3c50d2de7f27551e5c2570c47bfbc9bb8b2a627bf0b344857b30001e33365549ff16e1d04563f133577f0c6cda0b100e9075a308b7bf7ddcde8fb744f7790f3eab43fdd38241ce2bc94eff7142ac4fdbd221fd6114673946f7896303cb0a559c275277139c80c1455bd9a72da2820e70ab699fcda7be190b6f2c5a4a881b76452a715eaa38a31fb500c158b6df81f9af7f48d07a30597e91632012d55febee7be7ae31770bb2d9367cb5077ab5a0339f5d8de2ebffbe904a3ebfa850c143d75bd55a5469bd2fb1d422e15bb3850ecbb4c4632a384f0ef6fc45929f558d66f672c96e772a21eea2fee0e184128cabb74fd5f59093a65220d47278aac124d6df6a97a66be49203151aba05e392aae5bec2891efcff3214648667aec1d3ec60dfc4d62bf07d2fcaf8acd6bb387d0bbac1e9dad32f86eb0ded61fc648d4794141d9e1c4c722705fefdb5013d781f1807f4f7e5bea56373d55d63ba76c3b3515afc0933bf8a74a6ce297445cfc95c1a5d32cd1a76582e1d5ec74199b135bd3bf97dfd9f50d01280e8041a10f46339ac35b42718a1fbd42d5ca6a3b996c11ee644f165e059293041f6ddaacb4279822758ec6c78c29f5ad783efd55a0b24523204317bfe71c362b2158a27b06105f2eb707e12c3172597d8532f018451f5c39618a1a08aa67be0a312d1cb7b193aca2f9cb6d7bb4f10a6d56f9e1166de09e6f681c0f5178c5530acad28505420520e31e076192bbaeefbd0cccc801821e6fc5dc8b17eb2f374a91d3472d0499eaf03147416a15382ddde8941144e6b9229ad980946d81d8cd1daca5f162353189c7e491b48656f4f8a4a95d8baae4b6d522fa7d4f52148b89d148ac8f3a9992b4b3fbf1b067733963b8b27fb4394b455de0c827fa731e3fc46ad921e822ec0a62e1fc85bf80e63325987c20eb4e299d8496aa2bb745f7b06858e15fb786ff2a91813bb3620d397ddba4da77b4dd5242e46448c8cf513beefe62beb98c94baef138d6e43084ecd58e4f7b20cb10e9541abb8e1e61c5988411b15e4ae8182fd2ed18d5459fc810e95b20bc3a11b434eb8dee9aa61e08ae75fcb61c69ae960ac67e48bf973a111e830a7844ef3ce767100c811342094c4b738014ac1b8290ff7173d57c0b197d85d1dd3bc3b80420b862e8e42c7a1ae6e00fdaad0fbd3c30053fefb4a6495f592ccdae20882ceb23989bfdd9c1451875d00bcb241c5daaf364a43f0ffd1556978e4045b7cf38ef4f5b485b0f27a08eefdca324036b4620a82a4ffcd2d9c744597215138331bb7f808e834dedb223e5ea145ae5595f76cfc3c61001f7516297b36a1e1079f953636f22e6b66c696eb74f54832252610bc0ff9394fd7a6091cf4a0f8a171df38aa2ea630ce4be64c0523e144da5a0d05324d531edc74467c3c288de4a8fe5debaf19bd1c6940c0f1a4705a87a129b62a317bc7f77650015f3928a816115478da04983e015fad07ab3c8a60f90567d3a5a6964a7d815ff7c93b01c0f629927fd0f3a94255167377b84bcba082c5dcddee689cf9bd1ada313c930e2a22f2071726f4b4da6d339d6bb281a4470b922decd25554b87c8fe0c0ba1cb21919afab6f4d92a2b1b969b3b5dc5d6d55a81c4eec4f3abcf98f9e76e13abc720436f71029cac5a7f03cc699a6ae31e2c66fee6ee4d80c192d3a72fbc26cd7c4b4953d53fef38316e0f2372319f2667c90c12bb3504b2471cf85e31f61b84753e72fabead7a6c5f55b3e972fa0cd039012e0bc0c4a0121cd1ab092af486b0b8609156972d72ef18077f1a2721f713382203e4c00e0bda33619e8adeb7b7353b1a9d86345032edf0ecd09dcda99c92e8a6497147412326798522e14ec1b4bb48b58b9defc19df57b52b8b293941dee5958a02123f762e5176a67126a3c7d0b5cdda3635d09f7f09acebb29c0385931c1df689ed54cdb21055614152be96de54928d77b3177ce0a0ccc5b845a114e04ee16a511af96d2777a199c8f7c074667435ca737bd98a6c924642271de13e83e82a7301e0c80bfd8dc6faef3710fe3ba4c3aea152f6f0b38b46a3ed170e1014f334c570477f18d9a2b96124e236f46f5cde61941da7a6de401a255536d6996aa6441d1a70e19e3ab0489a5a0bc5cb15139ab16318f02701f92ab54e8f6dd286c9adccb86aff6a432a2de27710188848ec6a240146eb9616f39664854e748167e749f9dcfd8a56bf3dd8481de183e3b5bdcf820508f4adbd600ec92179fb38206e95cf3314ec024b2dabd407006fb57e06727a32006f2a25470e9310b2e6946c4010557b5febfbd1fad0a461029d63bfbbc53308de652ed24b4f56c0ef596ad369b48c93de86bd2276eb4946183c6a50e20fd893e39ac961d1baf7af3c6e78bf3214b88f4f59c7f3098c035c024f1dd191124c6608f8ef00b168332d8ca2c37fe0ebcf41cf3ec8460843c232cdd7c92dc70d4d741cb6ccab7c5373cad7981351dcb1867de309f7e09b39aac4cc181055dcaa7b152a99ac64e1a18461f3b274fcf7d90a9fd1fdc8341b2764284a52daa94b7e42090b69f2ed5a0b20199a2a0aeec57c2b4fb49636bb88c31b47a4b02cc8bace78a5c6d5301cb59916df4c8151e746d0af3f1252f6cf8a7bbe5bd1c26644a778ab39a5eb1af4cca59c77791fe0e90126b1c633e12dce5b61f740fb2d59e81deae9b9c1631adae0c8d9803b9c67914a1f5c487df098966b9d7d6aad0aa51e5ec26e6a8ff76614d8a2777280591b4fe66c11ead35ac81bd8782c1d53043e2e8d0d4aed60efd8d09ff43e9f6088e23aee889c39bad6abff5513aa85ec228117116e6283584b1f6912cdfb07d3e2b8180f315f686e8ade434c151c6a8a4bfe8787a72502566d758a26dd61c7a50a9bf87f50ab5cdd3697392adb90bb72f2ee18c0a67a5c96c2b0537abe157c375b66cede10ef8988244395a7bb2f03508f9966cd261149f75a7576d6ad18521d3d1ad30dd8e9e887640fe1654ff321a518976482f733c82f3a54f0fa40c94ec9a34830f173311538102f4421af1cac8f0268cd532528f7b1caf72064c0e645b57d94413217c6e743182258b228e5bb041f522461cd25643d2aadf8a434bff765e52b14b42df58256924394bfaca978e236d822c2609f125afe8010296b88de03e8707e3ee289a9d95cc0d3a04455403dc3479eff22907a9fe8a9f64eacd499df56f5ebcc9d01410a156e96555c1413443d329a28e7c4430238ecaffe43c558d8030a319b3f37745c1e607f162a3a6417c2dc2d0bcbb6b454cd3649a25d081d5e3571ce0390e74a9b5e09b9963df1e25400882ddb2b850c4055cfbfe91b85069b63e0761854a4f452ef3b10b08072e56a2e93f77d89ed138233c8f082e9b1e7d319148e3d8c9605c5f86e70175e6814a0a34d93af347d3d7f2bfe894f42c8b7d69af12d497f75dd8de8857fe380088af5e2464f10aabc8cbc7434d8f1c908323c550698f4110c37b733fa3873629090b9cc2ad28d5f669b6e708610395b232297c220d9487426d3f387ccdc7120ac840b5dd08d68279b4a0df337a09b7ac591dda45591be5b6b0d6b377f1494cc1681a4857554ad3b089139702a4638cccf946d5f8d180739d1989dca53c4282a61185c1631983ee52d976334ee007354ca9aecfafdcab5a805718a00cc8c5c4ce3f440e04c833d66134095bbc81c879244c4c50c19975e3a94f3971e991cd506850f519aea671e3d57fb62c87962ee114818ef0627124729e5cb491a6df2cc13a523d9c131d535b8e92dc7764be92f2ddb9f6f06712ba49ebe0661c2c0a6447e4519477000be545ac86c38035f5c2dfcd226c80fb55427f99343f1cc559928e4ebad4ad3b9888f28d93c710b24f4783db0593301fd1c46be759fab9db4a8bf5608b324009073fe716bd89deba8309c57666102a09e03a42e0edf63304beac88135c9b02fc9b75ee3bfa8381930234953c37c67cf992981a3bd5e237d05e9f3e144b1cb45814f79a74c2c961dda7d2fb0096401cd95707bc78f07f424078f44c895075e3498fced4523a45a34f71b3830e5c24b35cb19213ea81d5503511d789ba58902f8a7417f237d962b83ce97609b5f5d125ccb86a755b2b319c3478f8c28765fdbcc3333defedd3a9980630f50d43004584a9035651d02848bd12fe226200f2fa0f7344d5729abfe5b3181aac1c984e07c27e71912f94f1b5b731310dca0e13d545b0633de150d1677b9bdd883d9cbbec75f62f715262d9f34e07c3b53e15251fc8195ac50c3fbf5caaa2603ea880edf4d162ed9f3744ef9c1236b8cb0a4e15c4349efafad61bbcb5498083db3d1b3721eb7c7bec86b1b76dc3251a485d9e47c4891a22789e83e2ccea98e3f451704dc74eb1fcac39f7a40b362f94b9edb3515c1d15afd9816129dfb2bc4a30a095972acb4c6565759538edcd9498ce74fb18a47c08a795429cfe18e7f4a8aea473013e88f11af7b51bb1b617f47f6c2c1b3bb7444f40a6cd5ed16e708c3bae356c36259d897e8dbe370683a650cbf5b33c971e4a5cdce9b795d984054edb6746ae4d53cba8f9287eb1c421cf44d56b046d8d57a678f05576af5b2e3d4d5012225b8d1447b6e4e5cc3e15730e4ac89ec29fca480f83498b0fe53f51680c9ab692e80c1586ead394b0ec95db78b506a822fa255504ed48234bce087fc2080998882cbaa6bf89e17a841a5ac98aa3130219e7ffe46d83f56e6a2a88d820026cae23632177e46aee8e6ff87eac983514d954ecb29dc045f1d3c2f78172b5b9296a3043d37b560d5ff2ca7f675cd47158d2440d20aa1766b253a16028ba80cfc92e0aacb195ae1ea0b1d1287f35f94693e6c2ff9fb586ade8a56c87d51393bfc77a7cb26b58909b46fd2fcdde13bef970883785e2296f2d4842efe88ca9c328145f041f615a7b0beef0c4397b39b917265521af3e7cde3fb0fb6058148c5eb8caef10fa4eb3246ee375b0a1d0e752a63622a9884939d77af4d4d3afd7ad793f4fd5e1c2d55ef112d99b6b283dfc64562efcb785d21b98cbc0463f60d258e39351134060f1f7d3867e77c84d73cfa10315c396ac01f05722c7c2cb5581c665582b50aed5d465da9cf557d1441dd6efe3c7aab34882f9913f2fface2f45195f0873cd6a42e183f0ade52928a29393b97e7423b84608181a50f8260e7724a0dd584c95ed8b2f1c168343390568ddebef9b0826cc42714abfc0874f45b3e569dedd3af56710b6de77734a229d00830b332879a53dce0e886e3074c86e599d80dff92a112ddea0ad65d492bdd818d64a3e6be6894a1cb3dd631291318dc252532e61c5cad832ddc76de9277607120e2c70de14f6fa5cb192f26505a0d4821051639e546b8edfade6b34608a31bda338e0e4534f30288d11fabddfc913134ac333b3fcd75ab04d9adb481f43f07f392a19dc90e6580ddc89870d3ebf517136bb10d0115382f13b049b74c1883f0e0c880113de6ede0692de3f91427f54d00a575d37aaa5a82cf5e09e464d3e0d753facdce55a096b78f97e66148d130f7211265abb3070c5062ecc7a1fbcb8c406940af43f06a667ddd6f9c901bf1bd639e410dfe5c492b99fdca55a59e5ee737b4608d9ef3b69fd219ae772469570d1a1e8338c46c92a9f911496485ce333f37d5a661f228cb6e1e4e88b8041828342e00d35719f789f1360bb251fc03c4625a0d084ba9c25888ba67f86475468e93fddc3591ec384891a965a5423e3962356ea2a5cf4ae4169bf161091d040b98e89b988406b61294391263d34c1b9acec0caac7e655a5194ff14e971b7dd758d54972c8fe15a68a82f5fcf80ecf754599c96e80ace574323ceb0785d97c4ac10fc33d88e41cf5103d8b0b5b81ef6c2bf832d8b0d09dc027761e064dae6d5a4bb0341a9acee612f78f107a9777b6cefb0998e7ae0c368b1869db8626343fa69ce96d1c22fa6077f51093c42333a298563d2f1816520f1c5f6fc741ce75b94d5892d067cddcf8612b110d2c39daf2519827fbfbdb24cb748904afff12953b58de441b66c8683ca4ebeb8e94d6a9f4b57513dad0bfcb2f2222e4633a746622273431a263f66d718d4b7bf9961466fe7cf792b9470e768ca65ed865fb7ee1382a301d08efc3375b864f5346a921e6ee196c9710161e2b2629c9bee55d641366ebccc4c932cffacd7202c6d21e2b0df9104eb8476a54900cf7f5fa28c116283520cf52e2ea7496e5cbbbeb29e5e5f10edcd5f2cd677568c870454165191d563fcf363e0c7d9ce3849a9782266ca029f78c9e3b306d45b4aa76f84f9cec041e84f58e4d7bcea2bfdd47de9a5b178ac1a8012fdbf77aa5230d3ee6d31725a362c4e418ab0d3a6f738ab9c2079bbc226dbc078b66081014aac1536a968a07aaa0ee8064a89a0d2135dffbe54f0adecc8cb5f810a34aaf71bca8424a53c9658d9faab4d04b4cbfe09eb0f3b5db843fe0cfbf0816a7ade96cd05cacf7499c947e87ac94edc934a17b9bbd56d1fd697a91c73d1c5e239a6356e25ae83d31382f35a127709daf771d4c8fcb9fc9dd1ea08383d4a332f26599b68a96f2fa8d6d51a5726261f98e960ac47354918010908316390ccc43263d0d46684527347a013a77b631c76b5eac55a8e0caf2b3d668a24edf10ebbb43e8d364f1899de988d0be871e004f62e7adf96c5a5b35f9ee4c95fbd394c98e58bcfb7b88330f83c9a2e1f0060c6a10f319805ec2181e7c71df73a792cff0dd4a83bd0a0d34b22fe10ee96a8fc707b8bf81a3defabcb8e27a10227e616fea89fd8f481a57c1f864c0d530120c3351e17ec06da9d1349d53dd18ed98303801f100636212efbb0f627c1d52b59a1c189ae70f7ac5643187be0475d66f71d845bce8c40fc5460f465a80fd7b0fcd1f1c60798962cb928646d4ccc60ed829579c83787f36e97bb2ee842c189306a6ab08d4d5565b062817e26df42482b7a3ee5af4b3d6a481501ab269e60b0f654f633ce94b160044a2ef947b7b23232066d09e5e7c75ca81ce0a93b19934ccb6b4cbddb08475b8cd31638b64bba7fccc812f4f08a95102897851513021af62bd31f4641c714230926053eefbadaf87d2fee3e15dde5a8fe827325d5fe18bfdcae662062ee9c720a18fa7cb35564eae12621b6542e82dc6578971b5077f6715410356fd3705cc3108f79f9f93c0d85ff2bb0d622dd9f96690b7101a716a03bb505d1550adff3ad3d69da87e17fe383fbf71a2a77ea2f8242487b89b1e490c20765df13ded56f6e545a542f595655ec908c5c530c0aa28fa1f74d4d1999d3153ae83de27e8d0385fd5996e67c9086cf862c6aec1b081bec22b63d50e2b0a89a2096337db23285552403ea7ebafd2609dd6a36bc26083ae6ce39f8b2dc6b3aa59c548d76e4dd699c15a4c6dd471cf39b7508a57fdd0151d2c4264245e19d10d4c6e2fe229dd9eb41676dd09d261c1a4c69bc9fd378a597e8998d7888768fde8273e04c64e4009330270b31ae634c784d9dcdbd21d4917bc2b122b2c91530515d5cc12b27d4df0e29a20b3bf6aa3541462e8d5cde556f40047b93b07236935a1c866ff261e5646595728a9d58c8c50deaa4e204df29a31bc45e00a50d85f25e7a3ce87795a67ff45d61ee13f9a162f6b8b81e6487b3a7c9f113c069ea7b66a9671d53c16a7ae8018d2cc531128aeb28aca84e685cf284b334a4f91a8d1e3e65a21937ede48a9c0fc84275cea9413a1e0f814e2a8f3c4e7371b985085016bad4e706af5c0cb3be9e57afe6ae55ffa8cc282831ce55be7cc0c823c0c3af2008962405efb932bd3267124545a4691533d54c4ef5d89d6dcb3433566909072b96dd00a15ff05e683a05ac32c886c03038c20088d0ea224cab5d4b4d17b47cb7f68943a8ea8b883a2becf8a5d75b6904dfa02e157fb62ba279ff26b127204f08b53b6d194dc39e956992493a80d2902d119bd74c749e083fcb0d5427f5a07356d174ea891b0267cdb62515ed488d5852eaed3f906e9ecbc4395c69d609096471a7d44ad8ed8e4808006aea709dba631678eca882de39f4380a7e6a989dc6e8293b16ddb279a3632ce621e09e7f80fc0cf1c261a9335265ceba1e5210bdff809dd20c15656051f964abbcc7dc1db451b66ca7657353025807664e405eed33b7ffc2ce070066144cd2b1f2ce21cab7304fa6d82c5060cbd44ad92e89d872a69729cdce05d282638adff320583740d7b4045190ba6ad80c1666a320c3d62b7b532b6ade5e550657deffa64762e013f4fb89bb820e4c5e5a68899c0ea12ee81d4d0625a4670113a253f58dbb568491c4566b13019529b9114c443d522bd6a309592ffb940fb798d98208d2fb345f599403cfdf2f12a8364cd6f93988e63890019298b4483a00cb8673aac252fe75020fa3a9b2ee02d825cbd3a74814d68e210ff1066095730875301f58ad9ff0f525f69fad3715cbbfb748cd1638ba8ff1437d06fe5b7bff4a20c908e5c307803024b7a0e3848ab433d9e815a12e9cc09835f82fb86fc3c4c944cd7d4018f36b15800fbe93187f665568b316c185e697b73c57d57eb558f1544e4556604a91610fa72be7d137cd5f440d11afd94364d9ed3f90fe7ed948a759c6d4cfd4f50ac0ba74816afbf7930690236c064bc07e7b33b3c315041fef97ee0581179af0be43f6c3513280db61f35ce9a1001f39b111cf9da8ffed4813b2f52a17897649d984f45d633981f20c1ce0a1bb263d661e484c13c65c0a5912d7fd33ce8702e6222ebd940916623", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:18:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) 19:18:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) 19:18:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:16 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) 19:18:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3903"], 0x50) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 509.055103][ T18] Bluetooth: hci0: command 0x0419 tx timeout [ 509.272718][T13115] __nla_validate_parse: 14 callbacks suppressed [ 509.272853][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:17 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(0x0, &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:17 executing program 5: clone(0x2d0aff4034326935, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)="a9") [ 509.408009][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 509.419017][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 509.430237][T13118] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:17 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x3) 19:18:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x7b, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) [ 509.866514][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.873258][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 19:18:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x0) [ 510.264062][T13137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 510.354543][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.366452][T13142] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.434443][T13142] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x3, 0x1f, 0x1000}) 19:18:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000037c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x102) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000080)=@usbdevfs_connect={0x8}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0xfff, 0x7f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5001000010000307ebfff44906c6000040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0010000000250012000800010076657468000000001800020000003300b2bde9d40319696b905711068b27da6fff070000d2176644649a1f5319f68d2b13651a643ba1d8513a423db53c56eb151e5070f35faa51756195061de692da39b667087209ee6b4923b643112561fcf9319e2a307d09be23aa331f7b386fdc1989ab80ba1750ab421523dd48a31fe637082f9c3369133400"/173], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_getnetconf={0x24, 0x52, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xf4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60040084}, 0x46) syz_open_dev$mouse(0x0, 0x0, 0x602040) syz_open_dev$usbfs(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x8, 0x381800) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x64a, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044041}, 0x800) 19:18:18 executing program 5: r0 = io_uring_setup(0x2af0, &(0x7f0000001dc0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 19:18:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:18 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 511.221185][T13156] "struct vt_consize"->v_vlin is ignored. Please report if you need this. [ 511.230493][T13156] "struct vt_consize"->v_clin is ignored. Please report if you need this. [ 511.292567][T13163] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 511.351762][T13163] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:19 executing program 4: io_setup(0xb8a, &(0x7f0000000240)=0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 19:18:19 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:19 executing program 5: r0 = io_uring_setup(0x2af0, &(0x7f0000001dc0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) [ 512.102187][T13163] team0: Port device veth15 added [ 512.111398][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.186144][T13176] team0: Port device veth17 added 19:18:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) sendfile(r2, r2, &(0x7f0000000100)=0x10000, 0x8080ffffff7e) 19:18:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @empty=0xfdfdffff}, {0x0, @random="cf67f94d2d63"}, 0x0, {0x2, 0x0, @empty}, 'team_slave_0\x00'}) 19:18:20 executing program 5: r0 = io_uring_setup(0x2af0, &(0x7f0000001dc0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 19:18:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x200000c4}], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 512.930883][ T34] audit: type=1800 audit(1618946300.811:34): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=14068 res=0 errno=0 19:18:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000000)) [ 513.166609][T13197] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xa0}]}, 0x2c}}, 0x0) 19:18:21 executing program 5: r0 = io_uring_setup(0x2af0, &(0x7f0000001dc0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 19:18:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000000)) 19:18:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) 19:18:23 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$tmpfs(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c6174a58363e71a2ed6a55b6a380a43fca9697665900999d43a382d37353a", @ANYRESOCT]) 19:18:23 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x0, 0x700}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 19:18:23 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000000)) [ 515.430141][T13247] tmpfs: Bad value for 'mpol' [ 515.451715][T13248] __nla_validate_parse: 10 callbacks suppressed [ 515.451855][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 515.471363][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 515.471432][T13252] tmpfs: Bad value for 'mpol' [ 515.471600][T13248] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:23 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 19:18:23 executing program 5: timer_create(0xffbffffffffffff0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 19:18:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x60) 19:18:23 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000000)) [ 516.166910][ T34] audit: type=1326 audit(1618946304.051:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13259 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9b549 code=0x7ffc0000 [ 516.190559][ T34] audit: type=1326 audit(1618946304.051:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13259 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f9b549 code=0x7ffc0000 [ 516.216523][ T34] audit: type=1326 audit(1618946304.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13259 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9b549 code=0x7ffc0000 [ 516.240239][ T34] audit: type=1326 audit(1618946304.061:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13259 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f9b549 code=0x7ffc0000 [ 516.251292][T13260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x5) [ 516.547958][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.558865][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.568919][T13272] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:25 executing program 4: prctl$PR_SVE_SET_VL(0x35, 0x0) 19:18:25 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1747da", 0x44, 0x2f, 0x0, @loopback, @dev, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}}, 0x0) 19:18:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/71, 0x47}}], 0x1, 0x40010002, 0x0) 19:18:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 517.402839][T13291] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.413340][T13291] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.423083][T13291] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:25 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @random="1643021fe26c"}, 0x14) 19:18:25 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 19:18:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000cc40)={0x0, 0x0, &(0x7f000000cc00)={&(0x7f0000000180)=@newchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0xb}]}, 0x2c}}, 0x0) 19:18:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x62, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) [ 517.998935][T13298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 518.023727][T13304] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 19:18:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) dup3(r2, r0, 0x0) [ 518.407079][T13310] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:27 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x0, 0x8, 0x0, "0508cdfe5feb153f8c564b9a81fd116e138b5de077790bdb5bf2a6f855a2ddfe"}) 19:18:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000cc40)={0x0, 0x0, &(0x7f000000cc00)={&(0x7f0000000180)=@newchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0xb}]}, 0x2c}}, 0x0) 19:18:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:27 executing program 5: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1496d}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002da8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000900)=0x0) perf_event_open(&(0x7f0000000580)={0x3, 0x70, 0x81, 0xcc, 0x81, 0x4, 0x0, 0x9, 0x800c8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x5}, 0x80, 0x1, 0xb, 0x8, 0x1c00000000, 0x9a, 0x1}, r3, 0xb, r0, 0x0) fcntl$addseals(r2, 0x409, 0x3) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x8, 0x8, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92e6725240b5b87cff1866be0bec480ebc5c2189e00"}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000b80)={0x0, 0x101, 0x7}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000f80)={r5, "e13c1984b882029fbb54bae6bb3ac494"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@dev, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x4000001b, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f21d6fb697e016813b74913884da3800", "ffffe24e4d0923990212af76f412287b88d52644d882c50000e403000008f500", [0xffff8001, 0xffffffffffffffff]}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0xb3b, 0x1, 0x0, 0x1, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x7fffffff, 0x3]}) 19:18:27 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/234, 0xea) [ 519.612764][T13329] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 19:18:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 519.900158][T13338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffff0b}}, 0x20, 0x0, 0x0) 19:18:27 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x0, 0x8, 0x0, "0508cdfe5feb153f8c564b9a81fd116e138b5de077790bdb5bf2a6f855a2ddfe"}) 19:18:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000cc40)={0x0, 0x0, &(0x7f000000cc00)={&(0x7f0000000180)=@newchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0xb}]}, 0x2c}}, 0x0) 19:18:28 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 520.455798][T13347] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 19:18:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000cc40)={0x0, 0x0, &(0x7f000000cc00)={&(0x7f0000000180)=@newchain={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0xb}]}, 0x2c}}, 0x0) [ 520.828275][ T34] audit: type=1326 audit(1618946308.711:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13355 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5d549 code=0x7ffc0000 [ 520.851528][ T34] audit: type=1326 audit(1618946308.711:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13355 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7f5d549 code=0x7ffc0000 [ 520.875368][ T34] audit: type=1326 audit(1618946308.711:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13355 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5d549 code=0x7ffc0000 [ 520.898534][ T34] audit: type=1326 audit(1618946308.721:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13355 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f5d549 code=0x7ffc0000 [ 521.174760][T13359] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 19:18:29 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:29 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x0, 0x8, 0x0, "0508cdfe5feb153f8c564b9a81fd116e138b5de077790bdb5bf2a6f855a2ddfe"}) 19:18:29 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f00000002c0)) 19:18:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 19:18:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r1, 0x400454de, &(0x7f0000000040)=ANY=[]) [ 522.059596][T13372] __nla_validate_parse: 8 callbacks suppressed [ 522.059727][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.078141][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.088158][T13372] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:30 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@call={0x79, 0x10, 0x9a}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:18:30 executing program 3: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="400020000102000006000000001c08107f13", 0x12, 0x400}], 0x1008c5b, &(0x7f0000000080)=ANY=[]) 19:18:30 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x0, 0x8, 0x0, "0508cdfe5feb153f8c564b9a81fd116e138b5de077790bdb5bf2a6f855a2ddfe"}) 19:18:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x831, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg_v2(r1, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0xff, 0x2}}, 0x48) 19:18:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 522.642475][T13379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:30 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) open$dir(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f00000000c0)='./bus\x00', 0x10307e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ftruncate(r2, 0x8200) open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x607c1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x401012f7, &(0x7f00000003c0)) listxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) socket(0x22, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) [ 522.890618][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.901333][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.911533][T13389] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.296437][ T34] audit: type=1804 audit(1618946311.181:43): pid=13395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir026339654/syzkaller.nAtUcK/120/bus" dev="sda1" ino=14183 res=1 errno=0 [ 523.429302][ T34] audit: type=1804 audit(1618946311.291:44): pid=13395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir026339654/syzkaller.nAtUcK/120/file1" dev="sda1" ino=14246 res=1 errno=0 [ 523.653534][ T34] audit: type=1804 audit(1618946311.531:45): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir026339654/syzkaller.nAtUcK/120/bus" dev="sda1" ino=14183 res=1 errno=0 [ 523.679343][ T34] audit: type=1804 audit(1618946311.561:46): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir026339654/syzkaller.nAtUcK/120/file1" dev="sda1" ino=14246 res=1 errno=0 19:18:32 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x7, {0x0, 0x0, 0x9, 0x2}}) 19:18:32 executing program 0: r0 = epoll_create1(0x0) unshare(0x400) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x80, 0x0, r1, 0x0) 19:18:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:32 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) 19:18:32 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b640)='/dev/dlm_plock\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f000000b680)=0x0) io_submit(r1, 0x1, &(0x7f000000d180)=[&(0x7f000000b7c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 19:18:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x6, 0x801}, 0x14}}, 0x0) [ 524.760939][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.772818][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.783761][T13412] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:32 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006680)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0xfffffffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006680)='/dev/hwrng\x00', 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000140)=""/166, 0xa6) recvmsg(r1, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x10020) openat$hwrng(0xffffffffffffff9c, &(0x7f0000006680)='/dev/hwrng\x00', 0x0, 0x0) 19:18:32 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="00400000ec1f00001320000012000000000000000020000000040000611cad49840300001e000000000000000010cc030200010052654973457232467300000003000000020001000200000000000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003ac1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00"/1056, 0x420, 0x11000}, {&(0x7f0000010700)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x800, 0x11800}, {&(0x7f0000010f00)="00000000000000000000000012000000000000000020000000040000611cad49840300001e00"/64, 0x40, 0x2012000}, {&(0x7f0000011000)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x2013000}, {&(0x7f0000011100)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003ac1655f3ac1655f3ac1655f0100000000000000", 0x60, 0x2013fa0}], 0x0, &(0x7f0000011200)) 19:18:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000240), 0x40000000000031f, 0x0, 0x0) 19:18:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x3c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8011, r0, 0x7a8bc000) [ 525.416457][T13419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 525.780058][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:34 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:34 executing program 3: syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x20, 0xee}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x0, 0x2a, 0x0, 0x40, 0x4}, 0x81, &(0x7f0000000640)={0x5, 0xf, 0x81, 0x2, [@generic={0x72, 0x10, 0x3, "3070760ead8bf30500fac2b3e35d9414a50de08728f036306b0907c4d8e3fa6ddc8acff0ad7dd5829691cdabf1a1e20271e3bd69934c06b77327052018a5eb762e654854eb40e69da44ab31b33fc15d20ad2c20f0d220f44ad230597f112738a2e123d3ea31ea048ac3779211c700b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x40, 0x0, 0x5}]}}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) 19:18:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005340)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000006500)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={0x0}}, 0x0) 19:18:34 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x0) 19:18:34 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "a4bceb6439d3682c37a603f4bdfd2078dd43d01ba6ad947c05a27d5e87c36fc9baaf33b707b84c6ca7a889141f307c5a8e31315805389f112538c6194c64f4a2"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "a4bceb6439d3682c37a603f4bdfd2078dd43d01ba6ad947c05a27d5e87c36fc9baaf33b707b84c6ca7a889141f307c5a8e31315805389f112538c6194c64f4a2"}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000400)={0x0, "28e96b742b74c994b19c6adbede91c84ef82f1571a62cee0ca15d67e497af1f4eb72ad7bc107417653ce59285a58fceb02adcc6e57bd9b1b268a9c1b37d8cf03"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) [ 527.225956][T13453] __nla_validate_parse: 2 callbacks suppressed [ 527.226121][T13453] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 527.243863][T13453] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 527.254133][T13453] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:35 executing program 5: r0 = getegid() syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d69736f383835392d352c63726561746f723dc0e078c82c626172726965722c6769643d", @ANYRESHEX=r0]) 19:18:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001600df1200000000000000000287"], 0x1c}}, 0x0) 19:18:35 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x0) 19:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:35 executing program 3: r0 = fanotify_init(0x0, 0x0) write$binfmt_script(r0, 0x0, 0x80ffff) [ 527.878185][T13465] hfsplus: unable to find HFS+ superblock [ 528.073191][T13470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:36 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2200030007"], 0xd) [ 528.254370][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 528.271983][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 528.282419][T13479] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:36 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e040)={0x0, 0x0, &(0x7f000000e000)={&(0x7f0000000440)=@newtaction={0x14, 0x2a, 0x20b}, 0x14}}, 0x0) 19:18:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) dup3(r3, r1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0xc008ae88, &(0x7f0000000640)={"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"}) 19:18:36 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x0) 19:18:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 528.995409][T13488] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.005199][T13488] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.015203][T13488] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:37 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x0) 19:18:37 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x5b, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x2, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x63, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xe58d, 0x5}, [@call_mgmt={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x79}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x40, 0xa}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x16, &(0x7f0000000380)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x7a}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81d}}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004880)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffb, 0xaa, &(0x7f0000000100)=""/170, 0x40f00, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x6}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x0, 0xce9}, 0x10}, 0x78) 19:18:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x80004519, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:18:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 529.669217][T13507] overlayfs: failed to resolve './file1': -2 [ 529.802275][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:37 executing program 4: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x7, @dev={[], 0x34}, 'macvlan1\x00'}}, 0x1e) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 19:18:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 19:18:38 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:38 executing program 5: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x12, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x800008000}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8001, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 19:18:38 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000023c0)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=0xee01]) 19:18:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) keyctl$chown(0x4, r3, 0x0, 0x0) 19:18:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 19:18:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x6, 0x0, &(0x7f0000000200)) 19:18:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x5}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x23, &(0x7f0000000600)={r1}, 0x8) 19:18:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="a1110000000000001c00128009000100626f6e64000000000c0002800500010006000000bcf90c5ee9d5d9c9eb1de42eed"], 0x3c}}, 0x0) [ 531.563657][T13546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 531.987643][T13556] device bond1 entered promiscuous mode [ 531.994055][T13556] 8021q: adding VLAN 0 to HW filter on device bond1 19:18:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 19:18:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 532.317884][T13594] device bond2 entered promiscuous mode [ 532.324452][T13594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.655295][T13557] syz-executor.5 (13557) used greatest stack depth: 3296 bytes left [ 532.811354][T13633] __nla_validate_parse: 8 callbacks suppressed [ 532.811518][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.828599][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.838905][T13633] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:41 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 19:18:41 executing program 4: unshare(0x8000400) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 19:18:41 executing program 3: socketpair(0x18, 0x0, 0x1, &(0x7f00000004c0)) 19:18:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @local}, 0x7) 19:18:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 533.702594][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 533.714596][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 533.724695][T13646] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:41 executing program 3: socketpair(0x2b, 0x1, 0x1, &(0x7f0000000000)) 19:18:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003980)) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000ac0)=""/235, 0xeb}, {&(0x7f0000000bc0)=""/15, 0xf}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/114, 0x72}, {&(0x7f0000000e00)=""/214, 0xd6}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/61, 0x3d}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a00)={0x14, 0x0, 0x90c}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000012006785"], 0x20}}, 0x0) 19:18:41 executing program 4: unshare(0x8000400) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 19:18:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 534.417230][T13653] overlayfs: missing 'lowerdir' [ 534.602964][T13653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x2000000000077f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000700feffffff0800000000000000", 0x24) 19:18:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002040)=""/258, 0xbb}, {&(0x7f0000000300)=""/170, 0x48}, {&(0x7f0000000e00)=""/96, 0x58}, {&(0x7f0000000600)=""/204, 0x1c8}, {&(0x7f0000001040)=""/4096, 0x103e}], 0x5}}, {{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/45}, {&(0x7f00000001c0)=""/67}, {&(0x7f00000003c0)=""/210}, {&(0x7f0000000240)=""/115}, {&(0x7f00000002c0)=""/21}], 0x0, &(0x7f0000002540)=""/4096}}, {{&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @remote}}, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/52}, {&(0x7f00000007c0)=""/195}, {&(0x7f00000008c0)=""/129}, {&(0x7f0000000980)=""/193}, {&(0x7f0000000c80)=""/127}, {&(0x7f0000000b00)=""/24}, {&(0x7f0000000b40)=""/215}, {&(0x7f0000003540)=""/4090}, {&(0x7f0000000c40)=""/40}], 0x0, &(0x7f0000000e80)=""/141, 0xffffffffffffff5d}}], 0x14, 0x0, 0x0) [ 534.862896][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.874025][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.884913][T13664] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:43 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:43 executing program 4: unshare(0x8000400) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 19:18:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x28, &(0x7f00000001c0)}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcc4f0100, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x1988a, 0x34a, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) bind(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19:18:43 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8995, 0x0) 19:18:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 536.157787][T13683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:44 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x27, 0x4, 0x0, 0x0, 0x0, 0x0, "416171c5e9752725d1ec8ef706b82dfbf80ad458f798cac69cacfc39c01e90b1318620a623c0ca8187f322f159a4aed0e1df2a91c7c2e19a416c702af71390"}, 0x60, &(0x7f0000000400)=[{&(0x7f00000000c0)="194948bd74ab0a5c2a6752d588a8", 0xe}], 0x1}, 0x0) [ 536.580381][T13684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 536.949133][T13684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.970292][T13684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.978291][T13684] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. 19:18:45 executing program 4: unshare(0x8000400) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)="f5", 0x0, r0}, 0x68) 19:18:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:45 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 19:18:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 19:18:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setresuid(r1, 0x0, 0x0) [ 537.401134][T13698] overlayfs: missing 'lowerdir' [ 537.490964][T13698] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 538.484411][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:18:46 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:46 executing program 4: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) utimensat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:18:46 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303, 0x9}, "d5e15011115e3bd2", "c9ec7a9f87a96ed66e385d24b15aa3cf", "60b3c348", "7c50a922792acf33"}, 0x28) [ 538.867775][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.894801][T13707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 539.888755][T13707] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 539.905238][T13708] __nla_validate_parse: 2 callbacks suppressed [ 539.905306][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 539.921883][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 539.931411][T13708] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x32, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:18:48 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303, 0x9}, "d5e15011115e3bd2", "c9ec7a9f87a96ed66e385d24b15aa3cf", "60b3c348", "7c50a922792acf33"}, 0x28) 19:18:48 executing program 4: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) utimensat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 540.671330][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.682244][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.682857][T13730] overlayfs: missing 'lowerdir' [ 540.717988][T13733] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x14c, 0xffffffff, 0xffffffff, 0x14c, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) syz_emit_ethernet(0x36, &(0x7f0000000240)={@link_local, @random="73ba0faa677f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 19:18:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 540.897619][T13735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:48 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303, 0x9}, "d5e15011115e3bd2", "c9ec7a9f87a96ed66e385d24b15aa3cf", "60b3c348", "7c50a922792acf33"}, 0x28) 19:18:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 541.922441][T13743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:18:50 executing program 4: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) utimensat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 542.196174][T13743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.214796][T13743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.412423][T13743] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 542.429778][T13748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.439410][T13748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.449058][T13748] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:50 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='cmdline\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 19:18:50 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303, 0x9}, "d5e15011115e3bd2", "c9ec7a9f87a96ed66e385d24b15aa3cf", "60b3c348", "7c50a922792acf33"}, 0x28) 19:18:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 19:18:51 executing program 4: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) utimensat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:18:51 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpgrp(0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x140, r0, 0xffffffff, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x40) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x164, 0x17c, 0x17c, 0x0, 0x5, 0x248, 0x260, 0x260, 0x248, 0x260, 0x3, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'wlan0\x00', 'dummy0\x00'}, 0x0, 0x11c, 0x164, 0x52020000, {}, [@common=@unspec=@time={{0x38, 'time\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@mcast2, @empty, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x2000014) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:18:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, 0x8) [ 543.237682][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 19:18:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 543.657877][T13768] overlayfs: missing 'lowerdir' [ 543.698989][T13769] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 543.776519][T13765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 543.817260][T13772] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 19:18:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x6f, 0x0) preadv2(r0, &(0x7f0000002440)=[{&(0x7f0000000040)=""/49, 0x2b}], 0x1, 0x0, 0x0, 0x0) 19:18:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 19:18:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x0, 0x2}) 19:18:54 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xfe, 0xd3, 0x84, 0x8, 0xeb1a, 0x2801, 0x81d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd, 0xd5, 0x3e, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) [ 546.649693][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.660916][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.671050][T13805] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.724045][ T34] audit: type=1804 audit(1618946334.601:47): pid=13807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir399106076/syzkaller.PwKqlj/39/file0" dev="sda1" ino=14026 res=1 errno=0 [ 546.853794][ T34] audit: type=1804 audit(1618946334.641:48): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir399106076/syzkaller.PwKqlj/39/file0" dev="sda1" ino=14026 res=1 errno=0 19:18:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000c80)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000000)={0x0, [[0x9], [0x9]], [], [], [], 0x3}) 19:18:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x1, 0x7, 0x9, 0x0, 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r1}, 0xc) [ 546.879849][ T34] audit: type=1804 audit(1618946334.641:49): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir399106076/syzkaller.PwKqlj/39/file0" dev="sda1" ino=14026 res=1 errno=0 19:18:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x78) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\a']) r2 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0202, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="8ebd8d15da0d7365648ed526d3", 0xd}, {&(0x7f0000002800)="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", 0xff4}], 0x2) dup3(r2, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0xc, r1, 0x0, 0x1}) [ 547.165282][T13811] overlayfs: missing 'lowerdir' [ 547.249075][T13811] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 547.405899][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.415806][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.426233][T13820] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000029000504d25a80648c63940d0524fc6004000f400a003d005a00000037153e370a00018003000000d1bd", 0x2e}], 0x1}, 0x0) 19:18:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000c80)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000000)={0x0, [[0x9], [0x9]], [], [], [], 0x3}) 19:18:56 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:56 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 19:18:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}}, 0x0) 19:18:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmsg$kcm(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="440000002200055bd25a80648c63940d0524fc60100008400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) 19:18:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000c80)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000000)={0x0, [[0x9], [0x9]], [], [], [], 0x3}) [ 549.069424][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.102973][T13848] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 19:18:57 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) [ 549.201711][T13845] nvme_fabrics: missing parameter 'transport=%s' [ 549.208311][T13845] nvme_fabrics: missing parameter 'nqn=%s' [ 549.222605][T13848] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 19:18:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x5, 0xff, 0x5c, 0x0, 0x1}, 0x40) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001400), 0x8) 19:18:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x22) 19:18:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x4002012, r0, 0x0) [ 549.624976][T13851] overlayfs: missing 'lowerdir' [ 549.726225][T13851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:18:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)) dup2(r2, r4) [ 550.582251][T13867] ALSA: seq fatal error: cannot create timer (-22) [ 550.624216][T13867] ALSA: seq fatal error: cannot create timer (-22) 19:18:59 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:18:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:18:59 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c6", 0x4}) 19:18:59 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 19:18:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) r3 = inotify_init1(0x80800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r2, r4, 0x2, 0xffffffffffffffff, r0) ioprio_get$pid(0x1, r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000240)="c10f72ff03678fd26d4ece8ec9c50b371a797032338e5ed31f240d7a09b80a57c35786cbb60930f95b93e0783d6af16378700c3faf89fb4e6d168be9b90873b3399dac0ab97f6cac752aa690b921db48cdfaba7b887d485670b2d8681541fc091567801950522d247ce44783b374cf2a6a", 0x71, 0x85, 0x0, 0x0) recvfrom$inet(r1, &(0x7f00000006c0)=""/102400, 0xffffffffffffff72, 0x40010121, 0x0, 0x0) 19:18:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x53) [ 551.473574][T13878] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 551.492018][T13878] device ip6gretap0 entered promiscuous mode [ 551.498561][T13878] device macsec1 entered promiscuous mode [ 551.883614][T13878] device ip6gretap0 left promiscuous mode 19:18:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0x80000001]}, 0x0, 0xfffffffffffffe26) gettid() r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}], 0x93, 0x0, &(0x7f0000000500)="c2b0288966d6def8e979dece9b0ba6e4fb964917d20d3e890e01f4da019eda51252a3d05d318e31611a7492b735533ec10d0669145b590352191dc7c82755c7fb7f51337b17a4ccc8d59f894634d5e22536d793164a115bcfe1c72c4be000d68df14b42aba838806891bb390d4241af1a56aedf62a3c0f8470d5c6c4fa58b10e342af8673c2c4053cc6bd8cf5a819e2e7f5be8"}) r2 = socket(0x23, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000200)="4a94bfd7a9b09b68292247239f9b2645aeec703d94122d56b1cb0c6c58fa8edd37b0504132aa133c77a8427325dc887a9768385cc0d2c857df21a43f3b1637b440ff97a5367256b1b486bf539805b80c5449ae4ac90a6a81c52e39e46d149424caa88ba57bdecf5c0064a9e2dcdf27188309076222891c86cb3b34e15fc3cc6d440d2867870117a8", 0x88, 0x8000, &(0x7f0000000440)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x29, 0x1, @thr={&(0x7f0000000040), &(0x7f0000000180)="68f6d740bd4ad99e1f4a363a8d7563116f8e6d0de093b8eac76f5cac2f2d1f9980e1bc61f9308b8e5c749b8954624d8a25ec91e25635ba7c9079f4389b44224e07f50d140c46009d879a29c8fcfb50cfc9dec8154f7676b38091fefe45e876110b5b262beb8cfb5cb61372fdff1e51dc86"}}, &(0x7f0000000100)) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 19:18:59 executing program 0: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000300)="c8fd047cc269e76b7cfb57bf25b60bf0ea5fe99dab525d6909ad1eb882a644d132e0c9e1c61af574e8b05f0d073f9ec770f31725e2b098ffedd5b02503276367715d5e8ad4b6a6f8e1dc9b2fb77f49f5f810a4fe781e67dff4fe90efd72d70c2493388bdda141679dbdab01deffc93365d87fae780bba9d64dfaea380feb376e21c84469c91552a92be109b1899a9c8c3f2ff98588cd5f8818188a8e77c6f89f4b", 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xca01, &(0x7f0000000140)=@raw=[@jmp, @jmp, @initr0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 552.184104][T13891] overlayfs: missing 'lowerdir' [ 552.277964][T13891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x53) [ 552.532881][ T34] audit: type=1800 audit(1618946340.411:50): pid=13895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14161 res=0 errno=0 [ 552.992798][T13880] __nla_validate_parse: 5 callbacks suppressed [ 552.992869][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.009175][T13880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.019012][T13880] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:01 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@any, 0xffffffff}, 0x0, 0x1}) 19:19:01 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) [ 553.561829][ T34] audit: type=1800 audit(1618946341.441:51): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14161 res=0 errno=0 19:19:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x53) 19:19:01 executing program 3: r0 = socket(0xa, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000240)=0x5, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4171, 0x50) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40016163) 19:19:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:01 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001040)={&(0x7f0000fff000/0x1000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000d76000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000366000/0x2000)=nil, &(0x7f0000fd2000/0x2000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00003e9000/0x1000)=nil, &(0x7f000082d000/0x2000)=nil, 0x0}, 0xffffffffffffff79) madvise(&(0x7f0000000000/0x600000)=nil, 0x800000, 0x9) 19:19:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0x80000001]}, 0x0, 0xfffffffffffffe26) gettid() r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}], 0x93, 0x0, &(0x7f0000000500)="c2b0288966d6def8e979dece9b0ba6e4fb964917d20d3e890e01f4da019eda51252a3d05d318e31611a7492b735533ec10d0669145b590352191dc7c82755c7fb7f51337b17a4ccc8d59f894634d5e22536d793164a115bcfe1c72c4be000d68df14b42aba838806891bb390d4241af1a56aedf62a3c0f8470d5c6c4fa58b10e342af8673c2c4053cc6bd8cf5a819e2e7f5be8"}) r2 = socket(0x23, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000200)="4a94bfd7a9b09b68292247239f9b2645aeec703d94122d56b1cb0c6c58fa8edd37b0504132aa133c77a8427325dc887a9768385cc0d2c857df21a43f3b1637b440ff97a5367256b1b486bf539805b80c5449ae4ac90a6a81c52e39e46d149424caa88ba57bdecf5c0064a9e2dcdf27188309076222891c86cb3b34e15fc3cc6d440d2867870117a8", 0x88, 0x8000, &(0x7f0000000440)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x29, 0x1, @thr={&(0x7f0000000040), &(0x7f0000000180)="68f6d740bd4ad99e1f4a363a8d7563116f8e6d0de093b8eac76f5cac2f2d1f9980e1bc61f9308b8e5c749b8954624d8a25ec91e25635ba7c9079f4389b44224e07f50d140c46009d879a29c8fcfb50cfc9dec8154f7676b38091fefe45e876110b5b262beb8cfb5cb61372fdff1e51dc86"}}, &(0x7f0000000100)) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 554.215417][T13917] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 554.217254][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 554.244894][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 554.257264][T13916] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 554.456036][T13922] overlayfs: missing 'lowerdir' [ 554.632813][T13921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x53) 19:19:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@logbsize={'logbsize', 0x3d, [0x74, 0x25, 0x38, 0x30]}}]}) 19:19:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404}, @TCA_TBF_PARMS={0x28}]}}]}, 0x45c}}, 0x0) 19:19:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 554.978113][ T34] audit: type=1800 audit(1618946342.861:52): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14050 res=0 errno=0 [ 555.448494][T13934] sch_tbf: burst 0 is lower than device wlan1 mtu (1514) ! [ 555.674820][T13938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.684632][T13938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.694883][T13938] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:03 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 19:19:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x1) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 19:19:04 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:04 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, &(0x7f00000000c0)='no(#)-\x00\x90\x14\x00\x00\x04\xa1&\'*\xa8\x7f\aZ\xf4\xac\x01s\x17L\xa5`a6\a\x0fTx\x062\xe0\x1e\xb5\xf3X\x82\xc2\x1c\xc5\xb0\f\x04y*\x9f[\xbd\xa3G\x17@oo\xec\t\xa4\x9cG\xfe\xe6\xed\xe1\xdc\xe1\xb1O\x03\x1f\xd4>\xdc\x8f\x85\x7fb\xeb\xabl`a\x14e\xb5\xb4\x83\x89\xb7\x87\xfc\xaa<\xc8\xa6\xb6>Qf\xd6Jd\xfcdGB\x95\f+6mToe*I\xed_I\xf07K\x1a\xce\x8e\x04\x8a\xd6}<%\xf5^o\xf8\f0w\xfa\x9205\r\xc7\xb3\x1b\xe3!\x9e\x00\xca\xe2 z./q\t\xd4') 19:19:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0x80000001]}, 0x0, 0xfffffffffffffe26) gettid() r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}], 0x93, 0x0, &(0x7f0000000500)="c2b0288966d6def8e979dece9b0ba6e4fb964917d20d3e890e01f4da019eda51252a3d05d318e31611a7492b735533ec10d0669145b590352191dc7c82755c7fb7f51337b17a4ccc8d59f894634d5e22536d793164a115bcfe1c72c4be000d68df14b42aba838806891bb390d4241af1a56aedf62a3c0f8470d5c6c4fa58b10e342af8673c2c4053cc6bd8cf5a819e2e7f5be8"}) r2 = socket(0x23, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000200)="4a94bfd7a9b09b68292247239f9b2645aeec703d94122d56b1cb0c6c58fa8edd37b0504132aa133c77a8427325dc887a9768385cc0d2c857df21a43f3b1637b440ff97a5367256b1b486bf539805b80c5449ae4ac90a6a81c52e39e46d149424caa88ba57bdecf5c0064a9e2dcdf27188309076222891c86cb3b34e15fc3cc6d440d2867870117a8", 0x88, 0x8000, &(0x7f0000000440)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x29, 0x1, @thr={&(0x7f0000000040), &(0x7f0000000180)="68f6d740bd4ad99e1f4a363a8d7563116f8e6d0de093b8eac76f5cac2f2d1f9980e1bc61f9308b8e5c749b8954624d8a25ec91e25635ba7c9079f4389b44224e07f50d140c46009d879a29c8fcfb50cfc9dec8154f7676b38091fefe45e876110b5b262beb8cfb5cb61372fdff1e51dc86"}}, &(0x7f0000000100)) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 19:19:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x123402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="ae88bff8240b01005aa6f57f01003aeff0f6b78ef7c8962c22772e108cf41bdd0000fffffffffffffff0227377f8", 0x2e}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000002c0)) [ 557.335556][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.354531][T13959] cgroup: Unknown subsys name 'no(#)-' [ 557.377506][ T34] audit: type=1800 audit(1618946345.261:53): pid=13956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=13934 res=0 errno=0 19:19:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x2000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0, 0xfffd}, 0xef) 19:19:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:05 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) [ 558.185317][T13967] overlayfs: missing 'lowerdir' 19:19:06 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) [ 558.343745][T13974] __nla_validate_parse: 2 callbacks suppressed [ 558.343877][T13974] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.360288][T13974] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.370038][T13974] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.475291][T13967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f000078b000)={[0x80000001]}, 0x0, 0xfffffffffffffe26) gettid() r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x2}], 0x93, 0x0, &(0x7f0000000500)="c2b0288966d6def8e979dece9b0ba6e4fb964917d20d3e890e01f4da019eda51252a3d05d318e31611a7492b735533ec10d0669145b590352191dc7c82755c7fb7f51337b17a4ccc8d59f894634d5e22536d793164a115bcfe1c72c4be000d68df14b42aba838806891bb390d4241af1a56aedf62a3c0f8470d5c6c4fa58b10e342af8673c2c4053cc6bd8cf5a819e2e7f5be8"}) r2 = socket(0x23, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000200)="4a94bfd7a9b09b68292247239f9b2645aeec703d94122d56b1cb0c6c58fa8edd37b0504132aa133c77a8427325dc887a9768385cc0d2c857df21a43f3b1637b440ff97a5367256b1b486bf539805b80c5449ae4ac90a6a81c52e39e46d149424caa88ba57bdecf5c0064a9e2dcdf27188309076222891c86cb3b34e15fc3cc6d440d2867870117a8", 0x88, 0x8000, &(0x7f0000000440)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x29, 0x1, @thr={&(0x7f0000000040), &(0x7f0000000180)="68f6d740bd4ad99e1f4a363a8d7563116f8e6d0de093b8eac76f5cac2f2d1f9980e1bc61f9308b8e5c749b8954624d8a25ec91e25635ba7c9079f4389b44224e07f50d140c46009d879a29c8fcfb50cfc9dec8154f7676b38091fefe45e876110b5b262beb8cfb5cb61372fdff1e51dc86"}}, &(0x7f0000000100)) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 19:19:06 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x127800, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f00000000000000000000000000000000000000000000000000000000000000000100000101000001000808001800000000000018130000000000000000000015000000002200170000000000001700080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010b00)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010c00)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c45302a001a0000000000001a0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a00200000000000002028230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0xb800}, {&(0x7f0000010f00)="2200180000000000001800080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012a0025000000000000251a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xc000}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd000}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12800}, {&(0x7f0000011700)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000011900)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000011a00)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000011b00)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000011c00)="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"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000012100)="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", 0x220, 0xce7e0}, {&(0x7f0000012400)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000012500)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000012600)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000012700)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000012800)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000012900)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}], 0x0, &(0x7f0000012a00)) 19:19:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 559.066396][ T34] audit: type=1800 audit(1618946346.941:54): pid=13986 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=13864 res=0 errno=0 [ 559.197775][T13989] loop0: detected capacity change from 0 to 3520 [ 559.371837][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.381858][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 559.391525][T13994] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:08 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="ef"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7001000024000b0d00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100677265640000000040010200040102"], 0x170}}, 0x0) 19:19:08 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x7a}]}}, &(0x7f0000000040)=""/211, 0x2a, 0xd3, 0x8}, 0x20) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write(r0, 0x0, 0xfffffffffffffcc2) 19:19:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) [ 560.709084][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.719515][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.723143][T14008] BPF:[1] VAR (anon) [ 560.729665][T14005] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.733359][T14008] BPF:type_id=0 linkage=0 [ 560.733404][T14008] BPF: [ 560.733443][T14008] BPF:vlen != 0 [ 560.756960][T14008] BPF: [ 560.756960][T14008] [ 560.773843][T14007] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.803438][T14012] BPF:[1] VAR (anon) [ 560.807865][T14012] BPF:type_id=0 linkage=0 [ 560.812303][T14012] BPF: [ 560.815437][T14012] BPF:vlen != 0 [ 560.818987][T14012] BPF: [ 560.818987][T14012] 19:19:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 19:19:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000761000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f320f3066baf80cb84a02f48fef66bafc0c66ed2ed8ddc74424008fc4bd87c7442402c43a727fae73ae732406000000000f011424f30f090f013a36c9c4c18d72d6830f06ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x84) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000100)={0x14}, 0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x708}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 561.231902][T14018] overlayfs: unrecognized mount option "lowerdir" or missing value [ 561.349923][T14018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:09 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 19:19:09 executing program 3: symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x2) 19:19:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:09 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 19:19:09 executing program 3: syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000200)="377f0000004433e41a", 0x9, 0x480}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 19:19:11 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8a53b8ee0", 0xffffffffffffff98}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2286, 0x816d000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:19:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) 19:19:11 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 19:19:11 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) [ 563.494255][T14070] __nla_validate_parse: 4 callbacks suppressed [ 563.503440][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 563.513455][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 563.523608][T14070] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:11 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x902}, 0x1c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 19:19:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x0, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f000000c500)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002180)="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", 0x2000, &(0x7f0000010ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f000000e540)={0x2020}, 0x2020) [ 564.104874][T14086] overlayfs: unrecognized mount option "lowerdir" or missing value [ 564.196462][T14086] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:12 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 19:19:12 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 564.358300][T14092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.368634][T14092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.378500][T14092] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:12 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x201) clock_gettime(0x0, &(0x7f0000000380)={0x0}) futex(&(0x7f00000002c0)=0x1, 0x8b, 0x1, &(0x7f00000003c0)={r3}, &(0x7f0000000400), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f000077e000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) 19:19:13 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x0, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:13 executing program 4: r0 = syz_open_dev$radio(&(0x7f00000020c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000300)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 19:19:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x30, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0) 19:19:13 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x600, 0xfffffffffffffffe}, {}]}, 0xe0) 19:19:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000280)="d3", 0x1}], 0x1}}], 0x2, 0x0) [ 566.298879][T14127] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.310699][T14127] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.322988][T14127] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.349308][T14126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="8e0ee8189b0729f69b3c68", 0xb}, {&(0x7f00000003c0)="0708a11c106dc6103420d4d0d966909104d03abc7b2b6ee04bbc8c757f1a101a3e56c8e8d30827ef18c4e91e79728bb9c2bdcd7131b4e6437cde29174e0548b11a3d345c595c17e5fde21e4ebbbee0ce31f92d50d5530a0c91347e4957a31df83cf3c3182bb39221e43d2e46b83a547b8a4cdddbbc646a3864495d818db892d4e38ecb6ccdb071997a7d73e1ac7c7e368634f0c1a7", 0x46}, {&(0x7f0000000300)="813e72b59498463f445793219d417dae37b0c76218345813e38c37bc362d1921ce1ff857f322766f2eb4844c405f676beaacb977e6af02a9bef852efbb9d501106a0c38de9fbaf838396111e56ab1f7c4e3f332d341d1345830314bfab86fec887e2b49c80db4ab6251186800719cd99e51e657831590df171a50faad5d0f1dfb8866ec4a7b37256ec6e4ee89792a168dbf0d641442ffad042609a840672afd5b0bb0156751277b0674e1a", 0xdc}], 0x1) 19:19:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x0, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:14 executing program 4: getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0x80000000, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)="025e7884c5d3b3fd69eeacd108cd213acc0d9c3e408b56b95cf70f22230eba3c5a70290a920a84c7b95e4f0886c6243c17", 0x31, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'blake2s-128-generic\x00'}}) 19:19:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 567.036243][T14140] overlayfs: unrecognized mount option "lowerdir" or missing value 19:19:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) [ 567.204592][T14140] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 567.228422][T14147] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 19:19:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$xfs(&(0x7f00000005c0)='xfs\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x1, &(0x7f00000006c0)={[{@qnoenforce='qnoenforce'}, {@largeio='largeio'}, {@grpquota='grpquota'}, {@wsync='wsync'}]}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 19:19:16 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x0, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:16 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/231, 0xe7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x80045300, 0x0) tkill(r0, 0x7) 19:19:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 19:19:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b4420f416eeaffffffffffffff00"}) 19:19:16 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000300)=0x8) [ 568.894728][T14173] sp0: Synchronizing with TNC [ 568.972580][T14180] __nla_validate_parse: 4 callbacks suppressed [ 568.972846][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.004530][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.014489][T14180] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5385, &(0x7f0000000040)) [ 569.051666][T14173] sp0: Synchronizing with TNC 19:19:17 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000001540)={@link_local, @link_local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @dev, {[@ra={0x94, 0x4, 0x300}]}}, {0x0, 0x0, 0x0, @local}}}}}, 0x0) 19:19:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x0, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b4420f416eeaffffffffffffff00"}) 19:19:17 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x4}]}, 0x18}}, 0x0) [ 569.709607][T14206] overlayfs: failed to resolve 'f': -2 [ 569.803632][T14213] sp0: Synchronizing with TNC [ 569.849272][T14219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.861824][T14219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.888829][T14219] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x8) [ 569.952075][T14206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:19 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x300, 0x0) 19:19:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b4420f416eeaffffffffffffff00"}) 19:19:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x0, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:19 executing program 4: syz_mount_image$gfs2(&(0x7f0000000580)='gfs2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@statfs_percent={'statfs_percent', 0x2c}}]}) 19:19:19 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c04000024000b0f00000000008a890000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007462660030040200040405000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000100000000000000000000000000010000000000000009"], 0x45c}}, 0x0) [ 571.309133][ T3125] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.315744][ T3125] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.342946][T14241] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 571.351549][T14241] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 571.376086][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.385967][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.396755][T14242] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b4420f416eeaffffffffffffff00"}) [ 571.506115][T14247] gfs2: Bad value for 'statfs_percent' [ 571.583054][T14247] gfs2: Bad value for 'statfs_percent' [ 571.611382][T14253] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 571.619692][T14253] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:19:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 19:19:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000100000f010000000012000000000000000000004e000000000000000f0300000061e6cb006100"], 0xffffffffffffffff, 0x43, 0x9e, 0x2}, 0x20) 19:19:19 executing program 3: io_setup(0x1f, &(0x7f0000000000)=0x0) r1 = openat$full(0xffffff9c, &(0x7f0000001240)='/dev/full\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="9c4042115d30047609", 0x9, 0xfffffffffffffff0}]) 19:19:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x0, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 571.991758][T14259] sp0: Synchronizing with TNC [ 572.052349][T14260] overlayfs: failed to resolve 'f': -2 [ 572.199416][T14260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="580000001400192340834b80080d8c560a117fbc45ff81054e220000000658000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010009080800418e00000a04fcff", 0x58}], 0x1) [ 572.541767][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:21 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:f']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 19:19:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080), 0x0) 19:19:21 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r2, 0x5) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='\x00', 0x1, 0x40}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 19:19:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x0, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:21 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) 19:19:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x0, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:22 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f00000001c0)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c/\x0f@\x00\x00\x00\x00\x00(\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff\x809P\xee\x8aG\xdd2\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\xc6G\xa36\xc70Zz\xc7\xe9\x8d\xe8\xd4\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x90(\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac\x14\x1fXf\xfd\xd0\x1e\x83\x7f\x80\xddL\x1bt% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1de\xf2z\x90\x15s\xf3\xce\xcd\x91\xa8\xeb\b\xae+\xea^\x8b\x05B\xc5\x1a\xdc,\x8bE\xa2<\x82e\xecI\xb4p\x05\xa3\x1bra\x9ax\x943\x00\xe5M\xefM\xda[\xb8\x86\xae\xb7') 19:19:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0xd09, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 19:19:22 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x9000}, {&(0x7f0000010300)="0100030081000100111af001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0x60000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1d5c1641002a4c696e757820554446465300000000000000000000000405", 0xde, 0x600c0}, {&(0x7f0000010500)="000000000000000001", 0x9, 0x601e0}, {&(0x7f0000010600)="06000300520001006797e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x5d, 0x61000}, {&(0x7f0000010700)="000000000000000000000000000000000000000900100000002a4f5354412055444620436f6d706c69616e74000000000102000000000000001000001000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0x610c0}, {&(0x7f0000010800)="00000000000000000000000000000000000001008000000002400000002a554446205370617261626c6520506172746974696f6e010204050000000001000000100002003802000070000000f007", 0x4e, 0x611a0}, {&(0x7f0000010900)="050003004500010046a3f001620000000500000001000000002b4e53523033000000000000000000000000000000000000000000000000000010", 0x3a, 0x62000}, {&(0x7f0000000040)="0000000000000000000000000000000000000000000000000400000010050000d0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0x620a0}, {&(0x7f0000011200)="090003008d00010023677600800000000010e4070913122c1e4f0d190100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e000000c2020000d0020000002a4c696e7578205544464653000000000000000000000004050000000000000600000002000000010201020102", 0x86, 0x80000}, {&(0x7f0000011400)="02000300b10001006752f00100010000000001006000000000000100e007", 0x1e, 0x100000}], 0xc000, &(0x7f0000013900)) [ 574.651500][T14317] __nla_validate_parse: 5 callbacks suppressed [ 574.651744][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.670185][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.680687][T14317] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.723424][T14315] overlayfs: failed to resolve 'f': -2 19:19:22 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) [ 574.911095][T14315] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:22 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) [ 575.021214][T14327] loop0: detected capacity change from 0 to 4096 [ 575.195994][T14327] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2032, location=2032 [ 575.235777][T14327] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=1296, location=0 [ 575.245845][T14327] UDF-fs: error (device loop0): udf_read_inode: (ino 1296) failed !bh [ 575.330317][T14327] loop0: detected capacity change from 0 to 4096 [ 575.418183][T14327] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2032, location=2032 [ 575.508166][T14327] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=1296, location=0 [ 575.518114][T14327] UDF-fs: error (device loop0): udf_read_inode: (ino 1296) failed !bh 19:19:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/90, 0x5a}], 0x1) 19:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x20101) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x8) 19:19:24 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) 19:19:24 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) [ 576.535744][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.546989][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.557236][T14360] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc003, &(0x7f0000000540)=@framed={{}, [@generic]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000600)=""/230, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:19:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x83, 0x3000009, [], [{}, {0x801, 0x0, 0x80000001}]}) 19:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 577.094129][T14369] overlayfs: failed to resolve 'fil': -2 [ 577.209383][T14369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:25 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) 19:19:25 executing program 3: r0 = syz_open_dev$I2C(&(0x7f00000000c0)='/dev/i2c-#\x00', 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x5452, &(0x7f00000004c0)={0x0}) [ 577.639856][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 577.676906][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 577.694359][T14378] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:25 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000000000002000021ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00"/528], 0x210) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f00000002c0)) r1 = gettid() rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000200)={0x35}) 19:19:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 19:19:27 executing program 5: r0 = epoll_create(0x310) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x8000200c}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 19:19:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:19:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1277, 0xffffffffffffffff) [ 580.023887][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.033837][T14411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.043740][T14411] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:28 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) flock(r0, 0x8) 19:19:28 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002300)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:19:28 executing program 4: unshare(0x40600) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) 19:19:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 19:19:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 580.647127][T14423] overlayfs: failed to resolve 'fil': -2 [ 580.761971][T14423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 580.883252][T14433] fuse: Bad value for 'fd' [ 580.923408][T14436] fuse: Bad value for 'fd' 19:19:28 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="5500000018007f5b01fe01b2a40080930a060000ffa84308910000023900080005000a00fb7b00dc1338d54400009b7a136ef75afb83de448daa72540d8102d2c55327c43a", 0x45}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc503}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x20000000}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x6c}}, 0x810) [ 580.990188][T14438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 581.001552][T14438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 581.012827][T14438] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1d\x00'}]}, 0x1c}}, 0x0) [ 581.474888][T14443] device vlan2 entered promiscuous mode [ 581.480595][T14443] device macvlan1 entered promiscuous mode [ 581.512804][T14443] device macvlan1 left promiscuous mode [ 581.899083][T14451] device vlan2 entered promiscuous mode [ 581.904863][T14451] device macvlan1 entered promiscuous mode [ 581.917432][T14451] device macvlan1 left promiscuous mode 19:19:30 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:fil']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000a40)={0x0, &(0x7f0000000000)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x3) 19:19:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 19:19:30 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="feb74d19d2ca104c62175e7c8324ffe0", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="26eec1b97da692d95db821144c26e7afd4158d32cc5702b4cfed2e0718815462dbcca35de708d34f70778e5fa405f7aab933cd3dd614ca8651f66e84b637490214aac8a33488bc1fc27fe8dc76c3869148a83f611e61b12755fe8c903cb885ef046c", 0x62}, {&(0x7f00000005c0)="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", 0x2a0}], 0x2, &(0x7f0000001700)=[{0xc8, 0x1, 0xd1, "732bb19cb9db334a21b8151e65325db936dabc5cbdb0267e28332591cc01b7a138614ad6a3532379a1760ca34b734e7c774725f16259c8deca290d3621abb62df16b85d3d88ddc8e36a761fe34343cdd9aad996dcbc35e29aeeda0d1b624690cc442ceac71e7ac4ca1e3331f1a21e0bbe46ae2563ea1554cac1d9a44b037287727dd41600f6adbd796155eeb9f562560086a03ebf3c4de12b303e53061ac5239bdf1b946750a6090a06bb0aa97a59415fa"}, {0xe0, 0x1, 0x9, "ae47f6e0ef41258935c6f85017a81c4d9886f2b3901c65a4f8abe268b25b0c1a5ee7e8486f318d12b50578ba3d5335a6e74940b415aa75284f845cfcf8f6f008100ab1e8a10014049368944bf34bdcce03ae2c1f4974a3bbf72138f27cd05e5a11969b9530a79e22fcff104909bfdd325b89c0e92acbe36f9ef0293cc7170f5a6bfae99ba37870ebc652eee60becf47e251ccb1d9b64b207cc4ae5ed7a5172b553dc75988707990127abf904fcc569b6d8c3cbb7f95ad9ec9aa4b31d78c06f493c810cadd15317541d55a03639"}, {0xe8, 0x114, 0x0, "93508e2c8047ae6c39819e029a23151b28991be786e5ca3b58e4114518e33fbaee33f2d91a3994d0b474115e996cedb67712065954be4b4cae40ccace9f3dbede0150ed3bd2ae26039f691ecf264d484370c0cd4d214952d2b17db16da41696bd6fffb2e8a4446409b6db697a562c3fcdf86bb10ee698ad144107e7647a8c2cb7528749ba5f581108f3a825e68b48f57cd5f88317487fc10149c8fa4d87833ea9191d5788b8ebe7bee48602fcc2aa3d7a29f8c5cb3f3707b4d17a42188802e22312da40a9c8a4f28d7d13e6e638afb0b6ba2"}, {0x10, 0x102, 0x89}, {0xd8, 0x102, 0x45, "cb43d4266371afb329279bcd93a89d6765db127b621b388a1ccb226d0dfba8b9c8aa989d7b8c36909b7d77dcc9fc962ee2b50ed3d8e165e3e91408dc5ccf97ff1a0c61e617e040f00639c6940a9d557669f9d03b4bae85ef16dcee69b9eef8fa8956763c07ebdd91df3904797df7910b73cff31f1200eb18a8110787d27f5512d258ff06d029e9984f73fc5575e58e0e2a7943115f316fa860e010f40ace2c0be06a5ed45a442a9661be4b098dc19a3cb28b10b638f9836e488397ce30bfffa24a"}], 0x378}}], 0x2, 0x0) 19:19:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000001300)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 582.825809][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.835468][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.845614][T14468] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.858998][T14472] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 582.867827][T14472] team0: Cannot enslave team device to itself [ 582.924758][T14478] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 582.933374][T14478] bridge0: port 3(team0) entered blocking state [ 582.940219][T14478] bridge0: port 3(team0) entered disabled state [ 582.949546][T14478] device team0 entered promiscuous mode [ 582.955499][T14478] device team_slave_0 entered promiscuous mode [ 582.962252][T14478] device team_slave_1 entered promiscuous mode [ 582.969197][T14478] device veth15 entered promiscuous mode [ 582.978963][T14478] device veth17 entered promiscuous mode [ 582.987353][T14478] bridge0: port 3(team0) entered blocking state [ 582.993968][T14478] bridge0: port 3(team0) entered forwarding state [ 583.058216][T14472] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 583.067262][T14472] device team0 left promiscuous mode [ 583.072673][T14472] device team_slave_0 left promiscuous mode [ 583.081875][T14472] device team_slave_1 left promiscuous mode [ 583.088486][T14472] device veth15 left promiscuous mode [ 583.094574][T14472] device veth17 left promiscuous mode [ 583.101319][T14472] bridge0: port 3(team0) entered disabled state [ 583.134180][T14472] team0: Cannot enslave team device to itself [ 583.141200][T14478] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 583.150876][T14478] bridge0: port 3(team0) entered blocking state [ 583.157992][T14478] bridge0: port 3(team0) entered disabled state 19:19:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024001767a2bc004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:19:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x68, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x68}}, 0x0) [ 583.290127][T14478] device team0 entered promiscuous mode [ 583.295997][T14478] device team_slave_0 entered promiscuous mode [ 583.303246][T14478] device team_slave_1 entered promiscuous mode [ 583.310252][T14478] device veth15 entered promiscuous mode [ 583.316624][T14478] device veth17 entered promiscuous mode [ 583.325220][T14478] bridge0: port 3(team0) entered blocking state [ 583.331836][T14478] bridge0: port 3(team0) entered forwarding state 19:19:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:31 executing program 4: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 19:19:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a240)={0x0, 0x0, &(0x7f000000a200)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x10}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 583.666490][T14487] overlayfs: failed to resolve 'fil': -2 [ 583.735353][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 583.847475][T14487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0, 0xfffffe1b}], 0x1, 0x9, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f00000000c0)=""/4079, &(0x7f0000001140)=0xfef) [ 584.176797][T11498] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 584.435186][T11498] usb 5-1: Using ep0 maxpacket: 32 [ 584.559441][T11498] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.570845][T11498] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.581425][T11498] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.775036][T11498] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 584.784458][T11498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.792669][T11498] usb 5-1: Product: syz [ 584.797173][T11498] usb 5-1: Manufacturer: syz [ 584.801920][T11498] usb 5-1: SerialNumber: syz [ 585.185563][T11498] usbhid 5-1:1.0: can't add hid device: -22 [ 585.191928][T11498] usbhid: probe of 5-1:1.0 failed with error -22 [ 585.272933][T11498] usb 5-1: USB disconnect, device number 4 19:19:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x68, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x68}}, 0x0) 19:19:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x0, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:33 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:33 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040)=0x8, 0x4) 19:19:33 executing program 5: mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000013000)) 19:19:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = dup(r1) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x2000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x401870cc, 0x0) [ 586.416706][T14540] __nla_validate_parse: 6 callbacks suppressed [ 586.416886][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.434417][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.444436][T14540] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x68, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x68}}, 0x0) 19:19:34 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="9693239def8238fdc1d4d698f3344f3ac102d7e6d1c903e18b952ca3352cfb4b641e9986ac3e53c62e7d9a5505d7ed2ad3b3ef94a6a881713e408bf23227d13b67bbbdd9f40120", 0x47}], 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x0) 19:19:34 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) pivot_root(0x0, 0x0) 19:19:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x10001}}}, 0x90) 19:19:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x0, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 587.149605][T14551] overlayfs: failed to resolve 'file': -2 [ 587.289657][ T34] audit: type=1326 audit(1618946375.171:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14555 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5d549 code=0x7ffc0000 [ 587.400868][T14557] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x68, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x68}}, 0x0) [ 587.436617][ T34] audit: type=1326 audit(1618946375.221:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14555 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f5d549 code=0x7ffc0000 19:19:35 executing program 3: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000000)) 19:19:35 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) [ 587.616294][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 587.627100][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 587.637566][T14566] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 588.069087][T14572] IPVS: ftp: loaded support on port[0] = 21 [ 589.572272][T14572] IPVS: ftp: loaded support on port[0] = 21 19:19:37 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) timerfd_gettime(r2, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/85, 0x55) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v2={0x5, 0x1, 0x12, 0x8001, 0xd, "540d4e89e6e3811e78e30be407"}, 0x16, 0x3) 19:19:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x0, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:37 executing program 0: syz_mount_image$hfs(&(0x7f0000001880)='hfs\x00', &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000001d80)={[{@dir_umask={'dir_umask', 0x3d, 0xffffffff}}]}) 19:19:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x3}, {0x16}]}) [ 589.978317][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 589.989711][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 589.999452][T14634] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 590.103946][T14638] hfs: dir_umask requires a value [ 590.109595][T14638] hfs: unable to parse mount options [ 590.233225][ T34] audit: type=1326 audit(1618946378.111:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14632 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5549 code=0x0 19:19:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:38 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5f, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x2}) 19:19:38 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffca8}], 0x1, 0x9, 0x0) 19:19:38 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) timerfd_gettime(r2, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/85, 0x55) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v2={0x5, 0x1, 0x12, 0x8001, 0xd, "540d4e89e6e3811e78e30be407"}, 0x16, 0x3) [ 590.876111][T14648] overlayfs: failed to resolve 'file': -2 [ 590.964980][T14648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 591.292027][T14657] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.430001][T14661] IPVS: ftp: loaded support on port[0] = 21 19:19:39 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:40 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) timerfd_gettime(r2, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/85, 0x55) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v2={0x5, 0x1, 0x12, 0x8001, 0xd, "540d4e89e6e3811e78e30be407"}, 0x16, 0x3) 19:19:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/4081, 0xff1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) readv(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/82, 0x52}], 0x1) recvfrom$inet(r2, 0x0, 0xff0b, 0x0, 0x0, 0x800e00360) shutdown(r3, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000340)="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", 0x2c8c) shutdown(r2, 0x0) [ 592.310118][T14689] IPVS: ftp: loaded support on port[0] = 21 [ 592.342478][T14690] __nla_validate_parse: 2 callbacks suppressed [ 592.342634][T14690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 592.360005][T14690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 592.369752][T14690] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 593.026133][T14719] overlayfs: failed to resolve 'file': -2 [ 593.166676][T14719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 19:19:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) timerfd_gettime(r2, &(0x7f00000000c0)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1, 0x20, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/85, 0x55) lsetxattr$security_evm(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@v2={0x5, 0x1, 0x12, 0x8001, 0xd, "540d4e89e6e3811e78e30be407"}, 0x16, 0x3) [ 593.537408][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.552872][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.563924][T14728] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 19:19:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x0, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 594.575985][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.586285][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.596505][T14742] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:42 executing program 4: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000440)="ee", 0x1}, {&(0x7f0000000100)="f9", 0x1}], 0x2, 0x0) close(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000280)=0x7, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 19:19:43 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) [ 595.621156][T14752] IPVS: ftp: loaded support on port[0] = 21 19:19:43 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x0, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 596.230749][T14777] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 596.409061][T14780] IPVS: ftp: loaded support on port[0] = 21 19:19:44 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:44 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLOCK(r1, &(0x7f00000001c0)={0x8}, 0x8) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x4240a2a0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xd) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000000000103f1b0000", @ANYRES32=r6, @ANYBLOB="03000000000000002000128008000100736974001400028008000300", @ANYRES32=r5], 0x48}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@loopback, @empty, r5}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r7, 0x0) preadv(r7, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x300e0, 0x0) 19:19:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x140b, 0xc01, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}}, 0x0) 19:19:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x0, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:45 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000180)) 19:19:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 597.789069][T14817] overlayfs: failed to resolve './file1': -2 19:19:45 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) [ 598.257292][T14823] __nla_validate_parse: 6 callbacks suppressed [ 598.257424][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 598.274514][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 598.284803][T14823] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x24, 0x68, 0xa20918ed2359fd4b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}}}, 0x24}}, 0x0) 19:19:47 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 599.552068][T14833] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.562406][T14833] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.595465][T14833] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.690604][T14836] IPVS: ftp: loaded support on port[0] = 21 19:19:48 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080), 0x8) 19:19:48 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) 19:19:48 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:48 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 19:19:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 600.288071][T14861] not chained 530000 origins [ 600.292728][T14861] CPU: 0 PID: 14861 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 600.301521][T14861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.311606][T14861] Call Trace: [ 600.314912][T14861] dump_stack+0x24c/0x2e0 [ 600.319278][T14861] kmsan_internal_chain_origin+0x6f/0x130 [ 600.325053][T14861] ? kmem_cache_free+0xdf5/0xf10 [ 600.330133][T14861] ? kmsan_internal_chain_origin+0xad/0x130 [ 600.336056][T14861] ? __msan_chain_origin+0x54/0xa0 [ 600.341188][T14861] ? sctp_chunk_fail+0x119/0x150 [ 600.346214][T14861] ? __sctp_outq_teardown+0x111e/0x15f0 [ 600.351767][T14861] ? sctp_outq_free+0x37/0x40 [ 600.356444][T14861] ? sctp_association_free+0x3f8/0x11b0 [ 600.361997][T14861] ? sctp_do_sm+0x929b/0xa160 [ 600.366679][T14861] ? sctp_assoc_bh_rcv+0xa3f/0xe10 [ 600.371800][T14861] ? sctp_inq_push+0x31c/0x440 [ 600.376580][T14861] ? sctp_backlog_rcv+0x2bb/0x1710 [ 600.381750][T14861] ? __release_sock+0x26b/0x670 [ 600.386647][T14861] ? release_sock+0x98/0x2d0 [ 600.391248][T14861] ? sctp_wait_for_connect+0x518/0x9d0 [ 600.396720][T14861] ? sctp_sendmsg_to_asoc+0x2203/0x2520 [ 600.402278][T14861] ? sctp_sendmsg+0x35a5/0x5c60 [ 600.407131][T14861] ? inet_sendmsg+0x15b/0x1d0 [ 600.411816][T14861] ? ____sys_sendmsg+0xcfc/0x12f0 [ 600.416844][T14861] ? __sys_sendmsg+0x714/0x830 [ 600.421727][T14861] ? __se_compat_sys_sendmsg+0xa7/0xc0 [ 600.427230][T14861] ? __ia32_compat_sys_sendmsg+0x4a/0x70 [ 600.432877][T14861] ? __do_fast_syscall_32+0x127/0x180 [ 600.438277][T14861] ? do_fast_syscall_32+0x6a/0xc0 [ 600.443343][T14861] ? do_SYSENTER_32+0x73/0x90 [ 600.448052][T14861] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.454565][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.459767][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.464982][T14861] ? kmsan_internal_set_origin+0x85/0xc0 [ 600.470640][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.475865][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.481081][T14861] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 600.486900][T14861] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 600.492978][T14861] ? __genradix_ptr+0x8e6/0xbe0 [ 600.497836][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.503038][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.508240][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.513445][T14861] __msan_chain_origin+0x54/0xa0 [ 600.518388][T14861] sctp_chunk_fail+0x119/0x150 [ 600.523170][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 600.528559][T14861] sctp_outq_free+0x37/0x40 [ 600.533258][T14861] sctp_association_free+0x3f8/0x11b0 [ 600.538672][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.543889][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.549103][T14861] sctp_do_sm+0x929b/0xa160 [ 600.553614][T14861] ? do_SYSENTER_32+0x73/0x90 [ 600.558321][T14861] ? kmsan_internal_set_origin+0x85/0xc0 [ 600.563957][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.569164][T14861] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 600.574979][T14861] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 600.581223][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.586430][T14861] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 600.592246][T14861] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 600.598320][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 600.603295][T14861] ? sctp_assoc_lookup_asconf_ack+0x2c0/0x2c0 [ 600.609478][T14861] sctp_inq_push+0x31c/0x440 [ 600.614072][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 600.619888][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.625094][T14861] ? sctp_rcv+0x60d0/0x60d0 [ 600.629628][T14861] __release_sock+0x26b/0x670 [ 600.634325][T14861] release_sock+0x98/0x2d0 [ 600.638754][T14861] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 600.644571][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 600.649885][T14861] ? init_wait_entry+0x190/0x190 [ 600.654925][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 600.660319][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 600.665093][T14861] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 600.670924][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.676160][T14861] ? sctp_getsockopt+0x1f060/0x1f060 [ 600.681477][T14861] inet_sendmsg+0x15b/0x1d0 [ 600.686045][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 600.690912][T14861] ? inet_send_prepare+0x6b0/0x6b0 [ 600.696059][T14861] __sys_sendmsg+0x714/0x830 [ 600.700856][T14861] ? kfree+0x29/0x11f0 [ 600.704947][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.710169][T14861] ? kmsan_get_metadata+0x116/0x180 [ 600.715374][T14861] ? kmsan_internal_set_origin+0x85/0xc0 [ 600.721009][T14861] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 600.727081][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 600.732377][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 600.737842][T14861] __do_fast_syscall_32+0x127/0x180 [ 600.743055][T14861] do_fast_syscall_32+0x6a/0xc0 [ 600.747912][T14861] do_SYSENTER_32+0x73/0x90 [ 600.752424][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.758760][T14861] RIP: 0023:0xf7f9b549 [ 600.762822][T14861] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 600.782436][T14861] RSP: 002b:00000000f55955fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 600.790855][T14861] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000002001afc8 [ 600.798834][T14861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.806807][T14861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.814778][T14861] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 600.822748][T14861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.830724][T14861] Uninit was stored to memory at: [ 600.835735][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 600.841461][T14861] __msan_chain_origin+0x54/0xa0 [ 600.846421][T14861] sctp_chunk_fail+0x119/0x150 [ 600.851195][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 600.856566][T14861] sctp_outq_free+0x37/0x40 [ 600.861079][T14861] sctp_association_free+0x3f8/0x11b0 [ 600.866478][T14861] sctp_do_sm+0x929b/0xa160 [ 600.870984][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 600.876013][T14861] sctp_inq_push+0x31c/0x440 [ 600.880605][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 600.885548][T14861] __release_sock+0x26b/0x670 [ 600.890231][T14861] release_sock+0x98/0x2d0 [ 600.894655][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 600.899948][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 600.905329][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 600.910016][T14861] inet_sendmsg+0x15b/0x1d0 [ 600.914522][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 600.919376][T14861] __sys_sendmsg+0x714/0x830 [ 600.923971][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 600.929262][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 600.934725][T14861] __do_fast_syscall_32+0x127/0x180 [ 600.939930][T14861] do_fast_syscall_32+0x6a/0xc0 [ 600.944784][T14861] do_SYSENTER_32+0x73/0x90 [ 600.949290][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 600.955641][T14861] [ 600.957957][T14861] Uninit was stored to memory at: [ 600.962966][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 600.968687][T14861] __msan_chain_origin+0x54/0xa0 [ 600.973629][T14861] sctp_chunk_fail+0x119/0x150 [ 600.978402][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 600.983775][T14861] sctp_outq_free+0x37/0x40 [ 600.988275][T14861] sctp_association_free+0x3f8/0x11b0 [ 600.993653][T14861] sctp_do_sm+0x929b/0xa160 [ 600.998161][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 601.003104][T14861] sctp_inq_push+0x31c/0x440 [ 601.007691][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 601.012648][T14861] __release_sock+0x26b/0x670 [ 601.017350][T14861] release_sock+0x98/0x2d0 [ 601.021772][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 601.027061][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 601.032441][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.037120][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.041629][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.046481][T14861] __sys_sendmsg+0x714/0x830 [ 601.051073][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.056381][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.061846][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.067059][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.071936][T14861] do_SYSENTER_32+0x73/0x90 [ 601.076442][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.082775][T14861] [ 601.085091][T14861] Uninit was stored to memory at: [ 601.090114][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 601.095833][T14861] __msan_chain_origin+0x54/0xa0 [ 601.100775][T14861] sctp_chunk_fail+0x119/0x150 [ 601.105571][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 601.110946][T14861] sctp_outq_free+0x37/0x40 [ 601.115451][T14861] sctp_association_free+0x3f8/0x11b0 [ 601.120997][T14861] sctp_do_sm+0x929b/0xa160 [ 601.126020][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 601.131078][T14861] sctp_inq_push+0x31c/0x440 [ 601.135685][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 601.140757][T14861] __release_sock+0x26b/0x670 [ 601.145476][T14861] release_sock+0x98/0x2d0 [ 601.150451][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 601.155762][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 601.161174][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.165856][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.170747][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.175622][T14861] __sys_sendmsg+0x714/0x830 [ 601.180233][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.185541][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.191048][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.196265][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.201131][T14861] do_SYSENTER_32+0x73/0x90 [ 601.205651][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.211989][T14861] [ 601.214314][T14861] Uninit was stored to memory at: [ 601.219327][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 601.225058][T14861] __msan_chain_origin+0x54/0xa0 [ 601.230007][T14861] sctp_chunk_fail+0x119/0x150 [ 601.234799][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 601.240202][T14861] sctp_outq_free+0x37/0x40 [ 601.244724][T14861] sctp_association_free+0x3f8/0x11b0 [ 601.250111][T14861] sctp_do_sm+0x929b/0xa160 [ 601.254633][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 601.259764][T14861] sctp_inq_push+0x31c/0x440 [ 601.264495][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 601.269441][T14861] __release_sock+0x26b/0x670 [ 601.274137][T14861] release_sock+0x98/0x2d0 [ 601.278580][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 601.283890][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 601.289280][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.293970][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.298488][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.303376][T14861] __sys_sendmsg+0x714/0x830 [ 601.308150][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.313445][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.318913][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.324144][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.329031][T14861] do_SYSENTER_32+0x73/0x90 [ 601.333665][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.340009][T14861] [ 601.342326][T14861] Uninit was stored to memory at: [ 601.347332][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 601.353058][T14861] __msan_chain_origin+0x54/0xa0 [ 601.357999][T14861] sctp_chunk_fail+0x119/0x150 [ 601.362768][T14861] __sctp_outq_teardown+0x111e/0x15f0 [ 601.368159][T14861] sctp_outq_free+0x37/0x40 [ 601.372676][T14861] sctp_association_free+0x3f8/0x11b0 [ 601.378075][T14861] sctp_do_sm+0x929b/0xa160 [ 601.382598][T14861] sctp_assoc_bh_rcv+0xa3f/0xe10 [ 601.387567][T14861] sctp_inq_push+0x31c/0x440 [ 601.392170][T14861] sctp_backlog_rcv+0x2bb/0x1710 [ 601.397122][T14861] __release_sock+0x26b/0x670 [ 601.401822][T14861] release_sock+0x98/0x2d0 [ 601.406268][T14861] sctp_wait_for_connect+0x518/0x9d0 [ 601.411587][T14861] sctp_sendmsg_to_asoc+0x2203/0x2520 [ 601.416988][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.421700][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.426484][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.431352][T14861] __sys_sendmsg+0x714/0x830 [ 601.435962][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.441294][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.446768][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.452148][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.457016][T14861] do_SYSENTER_32+0x73/0x90 [ 601.461527][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.467862][T14861] [ 601.470182][T14861] Uninit was stored to memory at: [ 601.475195][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 601.480919][T14861] __msan_chain_origin+0x54/0xa0 [ 601.485861][T14861] sctp_datamsg_from_user+0x1d3c/0x2470 [ 601.491430][T14861] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 601.496821][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.501681][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.506189][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.511045][T14861] __sys_sendmsg+0x714/0x830 [ 601.515639][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.520934][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.526614][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.531844][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.536736][T14861] do_SYSENTER_32+0x73/0x90 [ 601.541259][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.547616][T14861] [ 601.549937][T14861] Uninit was stored to memory at: [ 601.554953][T14861] kmsan_internal_chain_origin+0xad/0x130 [ 601.560706][T14861] __msan_chain_origin+0x54/0xa0 [ 601.565680][T14861] sctp_datamsg_from_user+0x35a/0x2470 [ 601.571189][T14861] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 601.576592][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.581283][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.585807][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.590673][T14861] __sys_sendmsg+0x714/0x830 [ 601.595277][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.600591][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.606067][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.611286][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.616147][T14861] do_SYSENTER_32+0x73/0x90 [ 601.620657][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.627001][T14861] [ 601.629317][T14861] Uninit was created at: [ 601.633542][T14861] kmsan_internal_poison_shadow+0x5c/0xf0 [ 601.639275][T14861] kmsan_slab_alloc+0x8e/0xe0 [ 601.643950][T14861] kmem_cache_alloc_trace+0x8c7/0x1030 [ 601.649413][T14861] sctp_datamsg_from_user+0xf7/0x2470 [ 601.654817][T14861] sctp_sendmsg_to_asoc+0x117d/0x2520 [ 601.660195][T14861] sctp_sendmsg+0x35a5/0x5c60 [ 601.664881][T14861] inet_sendmsg+0x15b/0x1d0 [ 601.669914][T14861] ____sys_sendmsg+0xcfc/0x12f0 [ 601.674803][T14861] __sys_sendmsg+0x714/0x830 [ 601.679491][T14861] __se_compat_sys_sendmsg+0xa7/0xc0 [ 601.684779][T14861] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 601.690242][T14861] __do_fast_syscall_32+0x127/0x180 [ 601.695468][T14861] do_fast_syscall_32+0x6a/0xc0 [ 601.700323][T14861] do_SYSENTER_32+0x73/0x90 [ 601.704837][T14861] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 601.848079][T14865] overlayfs: failed to resolve './file1': -2 [ 601.905309][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 601.914993][T14866] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 601.924536][T14866] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:50 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) 19:19:50 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 19:19:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x84, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 603.711407][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.723314][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.733986][T14880] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.760150][T14881] IPVS: ftp: loaded support on port[0] = 21 19:19:51 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "6becea48930909"}, 0xb) 19:19:52 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) [ 604.832323][T14916] overlayfs: failed to resolve './file1': -2 19:19:54 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) 19:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x84, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:54 executing program 5: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000000)={0x1}) 19:19:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) 19:19:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) [ 606.702320][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.712581][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.723879][T14934] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:54 executing program 5: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000000)={0x1}) 19:19:54 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x9, 0x2c, 0x34]}}}}]}) 19:19:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x410001}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 19:19:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x84, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 607.375489][T14940] tmpfs: Bad value for 'mpol' [ 607.390115][T14940] tmpfs: Bad value for 'mpol' 19:19:55 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 19:19:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) read$eventfd(r2, 0x0, 0x0) 19:19:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) [ 607.909929][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.921924][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.933257][T14949] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:56 executing program 0: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x2, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xd421d84a04765236}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00900, 0x0, 0x0, 0x0, 0x10000000002) 19:19:56 executing program 5: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000000)={0x1}) 19:19:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x1, 0x0, @start={0x0, 0x0, "1dfafe688ead9eeff6bc2e4bbc461657915a680073d61c8163c4933f4fb4dfd3aff9f6495275e06887cea79e3594bb8b8ed1df2baef4c6ede55a2c60ab7b1f6aedab9d4c4b1a12cb543c7b4ea359caf9c2425272cd074224b6ee72a69b85c4d35654d42785f5c7f75340b7880fed7094ef417e15369e3faf1ecc4c238f7e5df31e741a9fb5382f1a982c3dc9db1378379688e9978011bb3132a14785e03cd0952be260e3aa346616980f855a7b0660a7928fec045b500046e0a5fc2c193a4c4d8ae6e85209c6cc207360a27406585dd74a506cbebe50ce89eb44a06ed911780b42fe00d674da92bc1d01f7e7b0ac0dc655d559726ac6df6a5c881d17fba4e3b6a61dabe151feb4b9603dc68b49ecae31aa872a57f42379287a08f95c5239fa41fb0f7683d4f6888788df1e4a1c1bb24114fd9a58933a89dec5396c63647161283dcb1e68dfab3b5d98bf566add7aa822d739e1fc6d5dbc8c43f2071c70e3dabfa10faa5b283c92db38b1e484a88c40a763fae5e4d70c3274b945fc206a935e73d1f061b79098221544e39aac2ad972ac4838690236f83080aacfe2332ac769afa8e1ef2da0ea1629889c17447abe74881422b334eed89b59bfcb046043a032b2865676321d2790095b80b48b9201dc4d80c4c100b561d5dec15996ea6351d978073f7cce0607c9e544a2bfce9c15dd6d0d63466fc7f10255a04d8642ebe1e60d0eb42d8c39f56eab416c278695e78be44f4eb190eb4a6a5bdd625dc5115c81f37c5199484575aa1652f7ff2d598f709d48ef7d924552d9813c5a64277ed3823305b1a25e43bee24193f9fbcfbe432862642cf4ac0d8a94ddf0805a2fe5fafec61dd6a270aa0b4cb348713ec463863a6c1a090f1d3145bef5a0ccf03439885fefa059433859b875b94361e331b4251fec45b01b10ac57860770704446274a436057e584b41c48c384bc251d868df5c12cf1fa53bd34e20ecc17fa43b2ca3e91cadde849382ab5cfee997753144db43521f4046cadd15cd6aed5a8a4440aeff5fac19b637639e47c6d0bff2272fedc896f00f0d70cdfc238fc868c289f0a6caa084f6e47f1a42e089b6425a702494c88799cfbb988dc393b4e503e9940c0e23416ca38a1ba56b86addbc80d7631e6e34cb44e80f579813fe965af266d83fd29ab29c49c6f26dd80ef783334115d38b9ad8085f230c2422293ecab011f673a2facf7f0f0e46aac243f51ab70ca41c932ba94d472e96932334c7bb41ce90fd5dc7367c908ce413b9cc47d5bf170c4febca73ec3bb1d772e3963af3afc448a3154d5db86319fabbe7b41fc6c6da22c1d06d1b9939e2f211d8d40777c4428d6968b4623b9c557cfac7be477efc7eeb3e0ae6f4c4c3cc20455c2a89349697bea8ab28071155bbfd46f3721b926f54ce1d7c9b3d322a9d9a6f6964263cee324d39678b3150", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) 19:19:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x78, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0xf9, 0x1) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) pipe2(&(0x7f00000008c0), 0x4800) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000940)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 19:19:56 executing program 5: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, &(0x7f0000000000)={0x1}) [ 609.013256][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.013660][T14969] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.013978][T14969] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x78, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x5, 0xffff1162) close(r0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x3, 0x0, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 19:19:57 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8ae110}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x90, 0x0, 0x0, {0x100000000004, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) [ 610.090296][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.110749][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.121703][T14985] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x1, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) 19:19:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB='\t'], 0x58}}, 0x0) 19:19:59 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:19:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x189102) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:19:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x78, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_OIF={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:19:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468fe0700000000000000ff3f020000003b0a00010000000019002b000a00080014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) 19:19:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd080000000000baa1068ee0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) pread64(r3, 0x0, 0x2, 0x0) r5 = dup2(r4, r3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000000280)={0x16b0, 0x12, 0x8, 0x70bd28, 0x25dfdbfc, {0x1d}, [@nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @uid}]}, @nested={0x184, 0xc, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @fd}, @generic="7a67e7942b641d757cbcb1919caffe2288a4b45fa7a472637d1797f7f0c3e1ad8608a6", @typed={0x8, 0x26, 0x0, 0x0, @uid=r2}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @generic="b1f1c7a7b398d36c235f304920a4e89ea42ae10ede8dfeaad1ce6825a541a8c3921489329960c305e7facb7bd915e837b57736f45a319d583ff232f57522968d0bbcf7c53d6891ed9643be31c1ed3dce5e13a5e0694b9d3dc765dc5625124c5fe141619eea24d710d7033da7be405d2ceecbc04dc6af886f0f3e05e8c7839535a8e59685ac068a2777a4a5505bf1b160219c90307bf655e9c5f212934a5ef30f9ac2fb389f9a9642a4799e6bdb002646c2d87f069e1b1640dbd82178832815ff8276b55d25b3c60592e8a48f508d5fd51d987f6d189656814e73a8fe34ba3e0a6f", @generic="69f11352ce02bee5e2dadf836657c100dcf3da8deb88f5a2ecabf7ac494d49d6a73997823ed7cc700cc998adbebba8b3b202a0b684276cabff6f525631a3536b42a1e7ca8216e0dbe7f856ecb74541d8ebabefb8d529e5cd"]}, @nested={0x112e, 0x48, 0x0, 0x1, [@generic="7b113f7ab63bc972f999c96a3b0cda9a9350e925e89b4d580df23d7aa8bb6ce35b56b5ce8dbad3b5eef0c5ea634b2d266a13ba0b7f1f26cd473982b89b744792dd614a877072ece666a263663add49f87567c5073df5754fa229debd5c208c3381392a647b06cb16", @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@local}, @generic="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", @typed={0xd, 0x8d, 0x0, 0x0, @str='-,,)$(,}\x00'}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x1}, @generic="922f43efa170f82c8a561a155e33e4ee0eefe7b288ac5829e60a187e7df536462c22bc887cbb586c473e2c8b1bf3ab7d529ca7b022941d5887488b56ca5c251dad403f4e9c6820987eed9750ad5dd348f4a00d90c4357c44ab4a51ae970ce06dbc7a55adee8cebb882f821b31cb85284c29f4d8a0568d3e3ffec31b0a81aceb775e55ef23121b5b91b561e57a8917b2a078706ee3d378a6dc783", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r5}]}, @generic="41c8cd5123f6daa0db2a0e32968dc8aec1e9cd1ae3617468f5f9c958518fb2f9f9b29084e4ed51d503233357ff677ccd161cbd77585b6bcf735df2f9f1930cdaddd4b6fe59ba1ddc012b76dadbf27f69c3292611ee13c92317c4028b56cb28941c122208d8b936883d7e102fc717975c15229c631ff25452a1640b135f14e3121623d6c3c9fe090d68db2c79f2fa16cb", @nested={0x1cc, 0x1b, 0x0, 0x1, [@typed={0x4, 0x34}, @generic="4a291c663fcb6a59a44727cb22cf35edc37b7cc6158788b47a334c5c58b8f8f238dfd8f74899dbc0c8f18e0fcea965b8573f5d2a921866882d64070eac35b219a986c5d3ef52f1bb78c4651b3586caf6574fa4457937", @generic="01a0b9324b9066de631a8d96c19808c6958917be85a003d461e2a93b4d0abd9e885e3e146c0cf9f1be82e3058584aa8026cace555ab28be86a2c14a2c57534599886a4717e225376e28f5708954b5b8f0fa901cfe42fc3194f98afff619a29dd0ddff8ff7a2069a2c391b88c7709c543a5ee7851f3feeb50c311bee5fab7d1f7e1cc36502a392c8c5b67810c5e541555462e1f2bb62229cd9f031fb70cf025baad3249a6e5964a7c8759176de0e95645cef21f35158a1875ce60c24ffe", @generic="e6b8324bbd7dff51583a1702921dda05ba2a9db56a15cf5f097ecc1d7cc8f41cce03bd4b4030579011bae5927e3eae7801221c62a318b3c71a4b4756855497bdae919a0775c10b44b739fd7f16ea6f8f561c142ad65a5583fd3e04c224c7f19885e9b352701d378185f51b004473c2faeccb9646157ac035ffc0ff1c6909fb611de18f31a5efc19bd0f77736f2267e769e8656c6d74a81b6cd255c5599d71428e033a0dc6fbf5ad14ce62678ae2283f7f7"]}, @generic="14206b8671bb56c889dbc926f6221fa8c3793ab211d48f6f3a27a2209d961e854dfa8ee63b29cc54a0e83c07b74ea0a77bf59f21d0194ccb9c4613c9fc5b4c08de244002fdfb794ea6ab55be520829a5957859ab145d121706ab869d5ee10a65b74efb15a940b0c88429a6c3d3f0fbd8fc79e3e8bf77391120fd24973b3c5ec2681d40d028859951d0e56916f963dde4808a12c1def8dfe57ab46a3d638486c07d4f8507ca65a2dbb274cc23c992355cf5869d9ee48fe22695b75db8287476dfb0883466cca12701fb78cbf92e2347fbd3af510d2581c0c6391716fb9c4610401670aebe3ee4801658b9a1573e28e5d15abc1deea19da9b2f8f125", @generic="bcb4f52273826cc10c563605ad796061d8b5de19a6ef31f2e22196df367cb2df8c4bbd653eb0e66a6c1513aba6c4741379addd5590da42cb3975566fcc6ccad19d38577a56394aad272bc49bc033339f1eddc06a9c49c840a067c6f89e54a9a3cc3a637a72117d0c3ede4e57d5c0c9eb3c72e6c3ac4f2afe86dee8afdfc9eda090fe"]}, 0x16b0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x400000000000064, 0x1f4) setreuid(0xee01, 0x0) 19:19:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x1, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) [ 611.970829][T15012] netlink: 'syz-executor.5': attribute type 8 has an invalid length. [ 612.002017][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.180662][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 612.180957][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:00 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000008500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 612.181039][T15016] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:00 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = fork() getpriority(0x2, r1) 19:20:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x0, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0xe, 'gred\x00'}, {0x4}}]}, 0x34}}, 0x0) 19:20:01 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 19:20:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000600)={0x1, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) [ 613.559819][T15041] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 613.642533][T15042] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 19:20:01 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:20:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x0, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:01 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = fork() getpriority(0x2, r1) 19:20:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/2616], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 614.441489][T15052] __nla_validate_parse: 5 callbacks suppressed [ 614.441616][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.442051][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.442394][T15052] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.629375][ C1] ===================================================== 19:20:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x0, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 614.629399][ C1] BUG: KMSAN: uninit-value in netif_receive_generic_xdp+0x15c2/0x2590 19:20:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}]}}}]}, 0x40}}, 0x0) [ 614.629542][ C1] CPU: 1 PID: 15053 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 19:20:03 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) [ 614.629575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.629594][ C1] Call Trace: [ 614.629604][ C1] [ 614.629615][ C1] dump_stack+0x24c/0x2e0 19:20:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = fork() getpriority(0x2, r1) [ 614.629655][ C1] kmsan_report+0xfb/0x1e0 [ 614.629688][ C1] __msan_warning+0x5c/0xa0 [ 614.629719][ C1] netif_receive_generic_xdp+0x15c2/0x2590 [ 614.629765][ C1] __netif_receive_skb_core+0x294a/0x65a0 [ 614.629809][ C1] ? ttwu_do_wakeup+0x260/0x6e0 [ 614.629879][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.629914][ C1] __netif_receive_skb+0xf2/0x640 [ 614.629945][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.629981][ C1] process_backlog+0x517/0xbd0 [ 614.630018][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 614.630051][ C1] __napi_poll+0x13e/0xca0 [ 614.630082][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.630119][ C1] net_rx_action+0x726/0x14a0 [ 614.630161][ C1] ? net_tx_action+0xd30/0xd30 19:20:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x80, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 614.630189][ C1] __do_softirq+0x1b9/0x715 [ 614.630223][ C1] ? idle_cpu+0x9a/0x1d0 [ 614.630284][ C1] ? __irq_exit_rcu+0x83/0x280 [ 614.630338][ C1] do_softirq+0x123/0x1c0 19:20:04 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) [ 614.630374][ C1] 19:20:04 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) [ 614.630386][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 614.630423][ C1] _raw_spin_unlock_bh+0x4b/0x60 [ 614.630455][ C1] bpf_prog_put+0x3c3/0x4a0 [ 614.630512][ C1] bpf_prog_release+0x53/0x80 [ 614.630545][ C1] ? bpf_prog_put+0x4a0/0x4a0 [ 614.630578][ C1] __fput+0x6bd/0xf00 [ 614.630646][ C1] ____fput+0x37/0x40 [ 614.630675][ C1] ? fput_many+0x360/0x360 [ 614.630706][ C1] task_work_run+0x140/0x280 [ 614.630760][ C1] exit_to_user_mode_prepare+0x486/0x560 [ 614.630806][ C1] syscall_exit_to_user_mode+0x35/0x60 [ 614.630852][ C1] __do_fast_syscall_32+0x14f/0x180 [ 614.630891][ C1] do_fast_syscall_32+0x6a/0xc0 [ 614.630929][ C1] do_SYSENTER_32+0x73/0x90 [ 614.630963][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.631000][ C1] RIP: 0023:0xf7fd5549 [ 614.631025][ C1] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 614.631056][ C1] RSP: 002b:00000000ffb95750 EFLAGS: 00000282 ORIG_RAX: 0000000000000006 [ 614.631091][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002 [ 614.631112][ C1] RDX: 0000000000000000 RSI: 000000000816c000 RDI: 0000000000000000 [ 614.631133][ C1] RBP: 000000000816c000 R08: 0000000000000000 R09: 0000000000000000 [ 614.631154][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 614.631181][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.631208][ C1] [ 614.631214][ C1] Uninit was created at: [ 614.631222][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 614.631267][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 614.631296][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 614.631336][ C1] pskb_expand_head+0x25e/0x1e20 [ 614.631369][ C1] netif_receive_generic_xdp+0x61c/0x2590 [ 614.631407][ C1] __netif_receive_skb_core+0x294a/0x65a0 [ 614.631440][ C1] __netif_receive_skb+0xf2/0x640 [ 614.631470][ C1] process_backlog+0x517/0xbd0 [ 614.631507][ C1] __napi_poll+0x13e/0xca0 [ 614.631533][ C1] net_rx_action+0x726/0x14a0 [ 614.631561][ C1] __do_softirq+0x1b9/0x715 [ 614.631593][ C1] ===================================================== [ 614.631604][ C1] Disabling lock debugging due to kernel taint [ 614.631722][ C1] ------------[ cut here ]------------ [ 614.631768][ C1] Illegal XDP return value 4294967274, expect packet loss! [ 614.633769][ C1] WARNING: CPU: 1 PID: 15053 at net/core/filter.c:8111 bpf_warn_invalid_xdp_action+0x147/0x150 [ 614.634017][ C1] Modules linked in: [ 614.634070][ C1] CPU: 1 PID: 15053 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 614.634189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.634255][ C1] RIP: 0010:bpf_warn_invalid_xdp_action+0x147/0x150 [ 614.634578][ C1] Code: 45 89 bd 50 06 00 00 45 89 a5 70 09 00 00 49 c7 85 80 0c 00 00 00 00 00 00 48 c7 c7 e4 2e 9e 90 44 89 f2 31 c0 e8 29 c9 ef f4 <0f> 0b e9 fa fe ff ff 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 [ 614.634693][ C1] RSP: 0018:ffff88813fd058d0 EFLAGS: 00010246 [ 614.634789][ C1] RAX: 75ad825b052b7000 RBX: 00000000ffffff00 RCX: ffff88816198be80 [ 614.634878][ C1] RDX: 0000000000000101 RSI: 0000000000000001 RDI: 0000000000000000 [ 614.634969][ C1] RBP: ffff88813fd058f8 R08: ffffffff81d175d3 R09: ffff88813fffa000 [ 614.635058][ C1] R10: 0000000005764f31 R11: 000000000000ffff R12: 00000000040e00cc [ 614.635128][ C1] R13: ffff88813fd27b00 R14: 00000000ffffffea R15: 0000000000000000 [ 614.635215][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0063) knlGS:000000000a519380 [ 614.635321][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 614.635407][ C1] CR2: 0000000030221000 CR3: 00000001601c4000 CR4: 00000000001506e0 [ 614.635494][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 614.635570][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 614.635651][ C1] Call Trace: [ 614.635686][ C1] [ 614.635728][ C1] netif_receive_generic_xdp+0x1ed6/0x2590 [ 614.635919][ C1] __netif_receive_skb_core+0x294a/0x65a0 [ 614.636065][ C1] ? ttwu_do_wakeup+0x260/0x6e0 [ 614.636228][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.636368][ C1] __netif_receive_skb+0xf2/0x640 [ 614.636492][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.636624][ C1] process_backlog+0x517/0xbd0 [ 614.636766][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 614.636893][ C1] __napi_poll+0x13e/0xca0 [ 614.637012][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.637147][ C1] net_rx_action+0x726/0x14a0 [ 614.637297][ C1] ? net_tx_action+0xd30/0xd30 [ 614.637413][ C1] __do_softirq+0x1b9/0x715 [ 614.637544][ C1] ? idle_cpu+0x9a/0x1d0 [ 614.637695][ C1] ? __irq_exit_rcu+0x83/0x280 [ 614.637840][ C1] do_softirq+0x123/0x1c0 [ 614.637976][ C1] [ 614.638023][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 614.638173][ C1] _raw_spin_unlock_bh+0x4b/0x60 [ 614.638292][ C1] bpf_prog_put+0x3c3/0x4a0 [ 614.638427][ C1] bpf_prog_release+0x53/0x80 [ 614.638552][ C1] ? bpf_prog_put+0x4a0/0x4a0 [ 614.638675][ C1] __fput+0x6bd/0xf00 [ 614.638814][ C1] ____fput+0x37/0x40 [ 614.638930][ C1] ? fput_many+0x360/0x360 [ 614.639047][ C1] task_work_run+0x140/0x280 [ 614.639182][ C1] exit_to_user_mode_prepare+0x486/0x560 [ 614.639362][ C1] syscall_exit_to_user_mode+0x35/0x60 [ 614.639535][ C1] __do_fast_syscall_32+0x14f/0x180 [ 614.639674][ C1] do_fast_syscall_32+0x6a/0xc0 [ 614.639818][ C1] do_SYSENTER_32+0x73/0x90 [ 614.639961][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.640110][ C1] RIP: 0023:0xf7fd5549 [ 614.640198][ C1] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 614.640331][ C1] RSP: 002b:00000000ffb95750 EFLAGS: 00000282 ORIG_RAX: 0000000000000006 [ 614.640447][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002 [ 614.640508][ C1] RDX: 0000000000000000 RSI: 000000000816c000 RDI: 0000000000000000 [ 614.640580][ C1] RBP: 000000000816c000 R08: 0000000000000000 R09: 0000000000000000 [ 614.640658][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 614.640734][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.640826][ C1] ---[ end trace 43ce2cf4d78d2cfe ]--- [ 614.685803][ C1] ===================================================== [ 614.685825][ C1] BUG: KMSAN: uninit-value in netif_receive_generic_xdp+0x15c2/0x2590 [ 614.685883][ C1] CPU: 1 PID: 15053 Comm: syz-executor.3 Tainted: G B W 5.12.0-rc6-syzkaller #0 [ 614.685917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.685935][ C1] Call Trace: [ 614.685945][ C1] [ 614.685955][ C1] dump_stack+0x24c/0x2e0 [ 614.685997][ C1] kmsan_report+0xfb/0x1e0 [ 614.686038][ C1] __msan_warning+0x5c/0xa0 [ 614.686076][ C1] netif_receive_generic_xdp+0x15c2/0x2590 [ 614.686140][ C1] __netif_receive_skb_core+0x294a/0x65a0 [ 614.686179][ C1] ? ttwu_do_wakeup+0x260/0x6e0 [ 614.686220][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.686256][ C1] __netif_receive_skb+0xf2/0x640 [ 614.686286][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.686320][ C1] process_backlog+0x517/0xbd0 [ 614.686356][ C1] ? rps_trigger_softirq+0x4d0/0x4d0 [ 614.686389][ C1] __napi_poll+0x13e/0xca0 [ 614.686420][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.686457][ C1] net_rx_action+0x726/0x14a0 [ 614.686494][ C1] ? net_tx_action+0xd30/0xd30 [ 614.686526][ C1] __do_softirq+0x1b9/0x715 [ 614.686561][ C1] ? idle_cpu+0x9a/0x1d0 [ 614.686600][ C1] ? __irq_exit_rcu+0x83/0x280 [ 614.686638][ C1] do_softirq+0x123/0x1c0 [ 614.686680][ C1] [ 614.686692][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 614.686731][ C1] _raw_spin_unlock_bh+0x4b/0x60 [ 614.686762][ C1] bpf_prog_put+0x3c3/0x4a0 [ 614.686794][ C1] bpf_prog_release+0x53/0x80 [ 614.686826][ C1] ? bpf_prog_put+0x4a0/0x4a0 [ 614.686858][ C1] __fput+0x6bd/0xf00 [ 614.686894][ C1] ____fput+0x37/0x40 [ 614.686924][ C1] ? fput_many+0x360/0x360 [ 614.686955][ C1] task_work_run+0x140/0x280 [ 614.686989][ C1] exit_to_user_mode_prepare+0x486/0x560 [ 614.687035][ C1] syscall_exit_to_user_mode+0x35/0x60 [ 614.687080][ C1] __do_fast_syscall_32+0x14f/0x180 [ 614.687119][ C1] do_fast_syscall_32+0x6a/0xc0 [ 614.687158][ C1] do_SYSENTER_32+0x73/0x90 [ 614.687193][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.687234][ C1] RIP: 0023:0xf7fd5549 [ 614.687257][ C1] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 614.687287][ C1] RSP: 002b:00000000ffb95750 EFLAGS: 00000282 ORIG_RAX: 0000000000000006 [ 614.687320][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002 [ 614.687341][ C1] RDX: 0000000000000000 RSI: 000000000816c000 RDI: 00000000ffffffff [ 614.687362][ C1] RBP: 000000000819afc0 R08: 0000000000000000 R09: 0000000000000000 [ 614.687384][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 614.687405][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.687430][ C1] [ 614.687435][ C1] Uninit was created at: [ 614.687443][ C1] kmsan_internal_poison_shadow+0x5c/0xf0 [ 614.687488][ C1] kmsan_slab_alloc+0x8e/0xe0 [ 614.687517][ C1] __kmalloc_node_track_caller+0xa4f/0x1470 [ 614.687556][ C1] pskb_expand_head+0x25e/0x1e20 [ 614.687589][ C1] netif_receive_generic_xdp+0x61c/0x2590 [ 614.687628][ C1] __netif_receive_skb_core+0x294a/0x65a0 [ 614.687660][ C1] __netif_receive_skb+0xf2/0x640 [ 614.687696][ C1] process_backlog+0x517/0xbd0 [ 614.687725][ C1] __napi_poll+0x13e/0xca0 [ 614.687754][ C1] net_rx_action+0x726/0x14a0 [ 614.687784][ C1] __do_softirq+0x1b9/0x715 [ 614.687815][ C1] ===================================================== [ 615.610042][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.610396][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.610583][T15070] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.896627][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.952927][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.953014][T15088] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:06 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) r1 = fork() getpriority(0x2, r1) 19:20:06 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 19:20:06 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 19:20:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) clone(0x12000000, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 19:20:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:20:07 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:20:07 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 19:20:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xfffffd17, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x24, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r1}, @IFLA_GTP_FD0={0x8, 0x1, r2}]}}}}]}, 0x50}}, 0x0) 19:20:07 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0xa8a5405ba57f2668) r1 = socket$unix(0x1, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380), 0x4) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @private=0xa010102}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='gretap0\x00', 0x200}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) listen(r2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x519fce9a84}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x6) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) 19:20:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x80, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:07 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000100)=""/249, 0x37, 0xf9, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xc0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}}, 0x10) [ 620.371268][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 620.384304][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 620.395381][T15144] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000130009006900000000000000ab008000200000004600010707000014190003001000000800005068230000000000ef38bf461e59d7", 0x39}], 0x1) 19:20:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x816d000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x6}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}, 0x1, 0x74}, 0x0) 19:20:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x80, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 19:20:08 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000002040)='./file0\x00', &(0x7f0000004300)='fuseblk\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) [ 621.328148][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:20:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)={0x18, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="bda39b"}]}, 0x18}], 0x1}, 0x0) [ 621.481150][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.492649][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.502815][T15158] netlink: 1028 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.622203][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:20:10 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:20:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 19:20:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:10 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000002040)='./file0\x00', &(0x7f0000004300)='fuseblk\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 19:20:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x2b3, @time}) 19:20:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x202002) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0, 0x4}], 0x1, 0x0, 0x0) keyctl$get_security(0x3, r2, 0x0, 0x0) [ 623.077984][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.088716][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:20:11 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000002040)='./file0\x00', &(0x7f0000004300)='fuseblk\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 19:20:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x20d81) write$sndseq(r0, &(0x7f0000000040)=[{0x86, 0x5, 0x0, 0x0, @time, {}, {}, @control={0x5}}], 0x1c) 19:20:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3280, &(0x7f0000000040), &(0x7f0000ee4000/0x4000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46ff043602030000000000000002000300090000001f030000000000004000000000000000d90200000000000000feffffac003800020003000001060002000000000000007e00000000000000ff7f00000000000008000000000000000000000000000000070000000000000000000000010000009a8c03adc1cc312c116fa4023f00"/404], 0x985) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 19:20:11 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, &(0x7f0000000840)) 19:20:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) [ 623.694803][T15208] overlayfs: missing 'lowerdir' 19:20:12 executing program 3: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "e9abec", 0x10, 0x21, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f9bfe2", 0x0, "0f6601"}}}}}}}, 0x0) [ 624.582694][ T3090] Bluetooth: hci0: command 0x0406 tx timeout 19:20:12 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./bus/file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) 19:20:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000002040)='./file0\x00', &(0x7f0000004300)='fuseblk\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 19:20:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="8c0800003000010000000000000000000000000078080100740801000b000100706f6c6963650000480802803c00010000000000000000000000000000000000000000000400000000000000ff07000a0400000000000000ff07000000000000000000000000000004040200"/144], 0x88c}}, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@mpls_delroute={0x8c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x6, 0x0, 0x4, 0xfe, 0x1, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x20, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x5}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_DST={0x8, 0x1, {0x9b}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x7f}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xe3c, 0xa, 0xfa, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xc, 0x9, r4}}, @RTA_VIA={0x14, 0x12, {0x1d, "00c50a04dd0de4524f85259f6524"}}, @RTA_OIF={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) 19:20:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xe4, &(0x7f00000000c0)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3280, &(0x7f0000000040), &(0x7f0000ee4000/0x4000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46ff043602030000000000000002000300090000001f030000000000004000000000000000d90200000000000000feffffac003800020003000001060002000000000000007e00000000000000ff7f00000000000008000000000000000000000000000000070000000000000000000000010000009a8c03adc1cc312c116fa4023f00"/404], 0x985) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0)