25f3b34abd55d188e4a17af05def019575213712372094d241"}, 0x48, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x20, 0x0) 00:18:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @local, 0x5}, @in={0x2, 0x4e20, @dev}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) 00:18:45 executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0x5c, 0x3d, 0x10, 0x9c0, 0x202, 0x4cbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa6, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x0, 0x0, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x44, &(0x7f0000001740)={0x0, 0x0, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:18:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack_expect\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, 0x0, 0x0) lseek(r0, 0x29, 0x0) 00:18:45 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, &(0x7f0000000040), 0xffa1) 00:18:45 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008064280008020100fe8000000000000036ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 1125.486430][T12551] syz-executor.5 (12551) used greatest stack depth: 3424 bytes left 00:18:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000003000)=""/165, 0xa5, 0x0, 0x0, 0x1000000000000000) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffff00000129, 0x0, 0x0) 00:18:45 executing program 1: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x101401, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) [ 1125.741511][T12561] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="f6", 0x1}], 0x1, 0x0) [ 1125.792571][ T5724] usb 4-1: new full-speed USB device number 25 using dummy_hcd 00:18:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 00:18:46 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) 00:18:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, @jmp={0x6, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1126.322926][ T5724] usb 4-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=4c.be [ 1126.332426][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.340554][ T5724] usb 4-1: Product: syz [ 1126.344988][ T5724] usb 4-1: Manufacturer: syz [ 1126.349782][ T5724] usb 4-1: SerialNumber: syz 00:18:46 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1126.380546][ T7988] udevd[7988]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1126.534876][ T5724] usb 4-1: config 0 descriptor?? [ 1126.587817][ T5724] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. 00:18:46 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c24020000000000000000000624050200020924030004030002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001e40)={0x14, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f8a68f7bf01a76}}}, 0x0) [ 1126.812816][ T5724] gp8psk: usb in 128 operation failed. [ 1127.122825][ T116] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1127.293387][ T5724] gp8psk: usb in 146 operation failed. [ 1127.299205][ T5724] gp8psk: failed to get FW version [ 1127.344895][ T5724] gp8psk: FPGA Version = 158 [ 1127.372719][ T116] usb 6-1: Using ep0 maxpacket: 8 [ 1127.475145][ T3560] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1127.492933][ T116] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.504483][ T116] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.514574][ T116] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.562526][ T5724] gp8psk: usb in 138 operation failed. [ 1127.568121][ T5724] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1127.578943][ T5724] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver error while loading driver (-19) [ 1127.613339][ T5724] usb 4-1: USB disconnect, device number 25 [ 1127.712533][ T116] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1127.722018][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.730165][ T116] usb 6-1: Product: syz [ 1127.734672][ T116] usb 6-1: Manufacturer: syz [ 1127.739508][ T116] usb 6-1: SerialNumber: syz [ 1127.752423][ T3560] usb 1-1: Using ep0 maxpacket: 8 [ 1127.872342][ T3560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.882901][ T3560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.043285][ T116] usbhid 6-1:1.0: can't add hid device: -22 [ 1128.050931][ T116] usbhid: probe of 6-1:1.0 failed with error -22 [ 1128.072087][ T3560] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.081303][ T3560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.089707][ T3560] usb 1-1: Product: syz [ 1128.094190][ T3560] usb 1-1: Manufacturer: syz [ 1128.098899][ T3560] usb 1-1: SerialNumber: syz 00:18:48 executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0x5c, 0x3d, 0x10, 0x9c0, 0x202, 0x4cbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa6, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x0, 0x0, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x44, &(0x7f0000001740)={0x0, 0x0, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1128.137125][ T116] usb 6-1: USB disconnect, device number 19 00:18:48 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000008880)) 00:18:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x78, 0x1e, 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, {}, {0x7, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8, 0xf}, {0x4c}}]}, 0x78}}, 0x0) 00:18:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 1128.290678][T12584] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 00:18:48 executing program 4: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x98, @fixed, 0x0, 0x1}, 0xe) 00:18:48 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000008880)) 00:18:48 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1128.637420][ T3560] usb 1-1: 0:2 : does not exist [ 1128.722117][ T5220] usb 4-1: new full-speed USB device number 26 using dummy_hcd 00:18:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000380)={[{@journal_checksum}]}) 00:18:49 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000008880)) [ 1129.059264][ T3560] usb 1-1: USB disconnect, device number 28 00:18:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 1129.104231][T12595] loop4: detected capacity change from 0 to 512 [ 1129.157006][ T7988] udevd[7988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.217585][T12595] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 1129.229305][ T3567] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1129.293061][ T5220] usb 4-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=4c.be [ 1129.302780][ T5220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.311004][ T5220] usb 4-1: Product: syz [ 1129.315941][ T5220] usb 4-1: Manufacturer: syz [ 1129.320665][ T5220] usb 4-1: SerialNumber: syz 00:18:49 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\v\xa4J\fIJ\"!w\xe5\n\xfaU\xa9\r\x8b\xf7&d\xa0\xe3\x9dh$X\x14se\x1c\xf0\xdb(\x96}\x9e\x1d>2\xa7\xdf\xa0\xb1\xf28\xd12b\x1d!\xa4\x0f\x9b\xda\xd8)\x98\xfb\xc1\xf3X\xcf\xdf\xa9d(\x9b\xd6+\xd7-\x8a\xe5\x15T1\xc8[Er\x1dF(3\xedfpe7\xa8\xca:\xb1\x97\x94E\xab\xda\x10XvF#\xae\xc7]vO|\x819\xd2x`\x00\x00\x00\rad\xab\xe8j\xb8-\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x11, r0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)='[', 0x1}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="2d13368a655ad4c3feaf02cde4b694d9becbad4e471fbf2ebb5e42e473bc94ae144c6ac91a7386a2863742b8d055b5d4f246807574fb6079e919ec7b73329fbb952f27a3e7352d05fdf28a0837fda7dd3bfd2015cb08fe03b47359d4fa7d47", 0x5f}, {&(0x7f0000001040)="25c0c95be60d2866be00f500869b0f03fc4f3be340bf0c8fab12336740ae6f52ec1aad0f4f54302b346b2531f259145ac5cdeed3e51dba63cd2ea1e05320a83088cfce3bc951945ffda19c799260fdc0c4a4e72770dacdbfcddabe175b8cc8288282ace8012ad1acaa505635318afa974f4be20c4d64f685578de6e6bd20b8f60321bd0ad056833063ffe82c0a6eef4409ff44fc51226b6b49c3213e32123c01fc79098523594ae1417397782078370fb1c875e89438db0147838b6239040aae966cafdbc62e02c5784941e7d76cb1c9ad7dc49a008e08faf637715e0a5d69c15495201dde113c4a79956320e6df7b91443e72023afd6b0064976046f0657fcc9b40ed414fc43dd802bae1915a2fd2e01ae72136686f8654df81a7df65d717c03c4697bf3c30c4eb414531fb9eb27a8ac30b1a7ccebbd3f6cee3425403529c43fe98ba40be15d34573c4f24ac554f98fffd000f6f75ad375fef5f80890700bdc8dbc55945bb38cc531fbe97ce38bc99297caa35e16e0a5d230ee737cc74f0aecb60fa4a2af14e14ecf32133afd05183f1b899f8cef47943378ab08848dab86a1b250e9d6a8fac31a36452b436a92793042f5e655fe092b55b0cbbe6f52150b5b3bccdd9853a4b549755df46e6042ee13fd566e0d7066d8a148a55d77723cc6868cac2dc668e5459dd4b5031ead527d28ef0ff3630252ced0f98ee2cdea01530234cb76b5ba0a5221d457dde0bb6461df468459d9bdc2f6dd9398e908344165ffe518d9ac3fa06c2e321a7fc7f431e015c3f0baf09437ae0b0c80ff7622c5eea7bcec0087cdf04ff244103f779d15feb769179ab511e586fc66c2492e437bd01f4fc82be7031fc09175f4f67fa3a074072bc89f9554674338d864622a2b53ddb6ad45d9f2b2460bda3e562066d6dcaad0baa5e38abf6a78af7c7112665ba636a10feac468dd83a692d415249ae58b6c4a45997759b175ba90f5f45d87cf33bbfcb3eedee880d0b6d6a50600effa4dad5aa61ed82afd4a2a0cd75b44b18e1939f234bb613f63f3963ca031d168e66280cf85d0a87ee9d3518e61f5f33531ea537aa2f99516bd4c340f4390060345211005caaab40bee950c9aa45fb916e5c613f84cf5602007bf886e27d480c075e60a137da9b2da3b489a6366a37989245ef234aae40e9802d18128a16fa1e5569d5733e52fee3a8439f0b389a5572fdd1ce29af85758ea7a4fbd89b64854a35e165bea0771fe94568a749f121cd35b56bb60b14ec388dcc61853847e096000dda5dda1c2c7c1a7ae853cd9bd81aa23b8731fa86874e5a19f93b0eb736ebbd7ba543535710fe0bbc2b0f9a587cc1db40bf168f9069a2ed30c3e3aec8cdf71411299c552c6564cf4c825a3e6c51983c83e0539636a4bc0883fde98fa3fea9642b7a659557bd3475087f8270fe7a9b65f146c03331f6fa75079acee87d48c395dc8ab1a9570884f9320e8a2e4da02ff5919507c4cd1a74207afa3df82f899cd1a59d4d9114fba03d186e061d013854cf3fc3c6c96bfaa701bbf80e56f1869c226dba287e2439d4710ead1a17ab6843d8be7a99f8cff5ce5a845d75bc50a668613943efc281f523016ad702c5121a05189e4c3154103e11e3e35c3b8a6b991e4c88d36d124a208b41d13742460057d7f82c6cc4c9a8dc24f8f98fd7781eafcf84738b72b89bf032af686269016aebd9dff538b7485fd9df6e4db83426e997d4bc1547ff993c2a630823b4f761250ee0a9d94f05073989f49fe3bd300e13ce57f5aa4e8d5f4084dd580f3b88e156b5151f1e8ed47683f3f3c25d42e8afb250b439ceb81b748cc97c858c5343de37c3214099083a7cd834e70cf63d6bf48ebdbf1f9a6c6ab236baad23f52dab0b6dd3c4b5c3492c70dccb0f967c51d1c0202e5ed32557d0cf267682959ee110f46640c9ff3102e1c29dcd8b4045d1ee1e50bbd8782adf8af6a36b367d33e5271ff24c47d6bd9a837481e7f7238d635df5325a261c66fefd693ebb6bb5986d0261e4a331a0927806b7c08b0a1b6ee959cc6d0a663d61f1d0032c97cfdd4c888b10126412cd5641a5123e118eda44544b0475f0361fb15ae757bf6fc314d6e5022548b6dd9a27cb53147564b83f69b8ed4f41bb1efe7427292123b5947f78477acbd63e70838cdc4913e69edef7513a3a4028427290b461e23b97820fbffd6cdd312c842c04e8d537abee3fa6ad5970020c9c3ed7326a256d66e23d04238f507bd84616fa330fee02a166e2c33121eebd4efa1747f03038de742e113018060ec2d03abb845029f58b02b610eb8a206dd98e3d39e69689f2bc48cb22c6cd5ecff03bbe70a16a1d32945801278bb16771ed46a99f2ded640b2b987032150f9183705f3d872955e03dc85953d5bd17bda6c3f3f880c59f6abae62ae1950c18c88900f524a0d324b7fbfa9ff8eae2443ab234dbb68ac54c11460437076112f9a157295d2e7b08c46be2bf0785c143a671027f7dce66f3666d94edad34f0a69966bc0efd9729b33b5b48f0c1fd48ae9dff5fcf996ba5b2f41f0f84d514294e4759ba4ba53c021277d96baa321566f05d782183c6d90140415ce87e73d65147da5250e1271b8cd8a0817f2c96e0d6ccf7e0cf5e9fa69e1c94719d4d5326343ac27cbac004041f26668f14bf527821e39d5afebe7520fef54308356a17dc32a677ed744c11416e7a7faeb46f848da23fcd0acab48ef97d904bd677e4db02be4b80ef127d4b2a7e54e126907c08637fc891516353a08d8c6a4eadb0fcfecfd66b5c08ce9b2a44c28006a24c7d83f87ce541fab69761a0fd290e0432f2ae0b3f58263951d23727fe5182d694ca961f0e84a05cff4c5bb744977fc3595bedb2f186dc1373746411001785ee744cae383f0c1572b0787bf80d57153d3b4c2d59cd15eb167a6fd1fd8e731935c411c2e6a2f382aba4ceb1a56211c3c2b0c369a1d88bc7328a56dc8db6ab781cbffce3e89e80a1934f9022e22a7b5cd7aa90405c8546453f5b8b34ce17219960caa133e2052b8c0cb6faf84676bfeac8614046d487e1d0fa382fdb095d03de283fe1584782effff7ff80d8402890e4a51c2b41c181d5cf1d76930a95e3a09039d9194bbdc5ef7d6f9c517752726e851a0504aa199397de9014339e6c11dc843428c3b31fbb609bc9d24cd8542b5909f95e9548b6bf3a4411fae245e252673630a89af3c586f0cf9816a87bd645ebc58df23d3ac8341e1633dd5e79d2d09a77ad8bb2afb370093482d7677cf4d69f7240c4af3e333457c49e83b5ad2cdb320f1137db45084c1150ad5b56265cc2ca846f49fb2924099ca4e9c4f1ed3cae268db671c8593ae58efcd9b1f82543812d090cfa5d21e48f27f75d923d375c9555d695d86c9d98fb1345a4fef4f6ea710b4098f5afc55d205c8546485c36fa58ee895672a355bdc4d569f27e0f08dc599e50c696b3b7b98f5d4240d9169c6528d92253c1b30c289e79b68e7c0649a8a278223d772c4f8ff8985c283fa0558688d8ed99d9578ccc0d20f2cd5e99649d5154e4b9ae309fe5b6335e1005f39e36de9b07be58e312fae67c350ed679ebc372ae3dbe1573adb21117dfd20561d2ea2b37125609fa90ba90c56f89877dec063d1f38389a7a82862edc12031", 0xa15}], 0x2) symlink(&(0x7f0000001000)='./bus\x00', &(0x7f00000000c0)='./bus\x00') [ 1129.392614][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.399230][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.474096][ T5220] usb 4-1: config 0 descriptor?? [ 1129.485949][ T3567] usb 6-1: Using ep0 maxpacket: 8 [ 1129.520675][ T5220] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. [ 1129.622892][ T3567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.634307][ T3567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.644524][ T3567] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1129.722640][ T5220] gp8psk: usb in 128 operation failed. 00:18:49 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c24020000000000000000000624050200020924030004030002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001e40)={0x14, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f8a68f7bf01a76}}}, 0x0) [ 1129.884111][ T3567] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1129.893486][ T3567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.902280][ T3567] usb 6-1: Product: syz [ 1129.906596][ T3567] usb 6-1: Manufacturer: syz [ 1129.911315][ T3567] usb 6-1: SerialNumber: syz [ 1130.242487][ T5220] gp8psk: usb in 146 operation failed. [ 1130.248165][ T5220] gp8psk: failed to get FW version [ 1130.298172][ T5220] gp8psk: FPGA Version = 158 [ 1130.313275][ T116] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1130.363465][ T3567] usbhid 6-1:1.0: can't add hid device: -22 [ 1130.369728][ T3567] usbhid: probe of 6-1:1.0 failed with error -22 [ 1130.393705][ T3567] usb 6-1: USB disconnect, device number 20 [ 1130.503879][ T5220] gp8psk: usb in 138 operation failed. [ 1130.509472][ T5220] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1130.522718][ T5220] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver error while loading driver (-19) [ 1130.562147][ T116] usb 1-1: Using ep0 maxpacket: 8 [ 1130.585729][ T5220] usb 4-1: USB disconnect, device number 26 [ 1130.692743][ T116] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.703199][ T116] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.872841][ T116] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.882220][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.890360][ T116] usb 1-1: Product: syz [ 1130.894895][ T116] usb 1-1: Manufacturer: syz [ 1130.899612][ T116] usb 1-1: SerialNumber: syz 00:18:51 executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0x5c, 0x3d, 0x10, 0x9c0, 0x202, 0x4cbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa6, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x0, 0x0, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x44, &(0x7f0000001740)={0x0, 0x0, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:18:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r0, &(0x7f0000008880)) 00:18:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)) 00:18:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 00:18:51 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:18:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000008140)={0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f00000005c0)={0x1c, 0x76, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x1}, 0x0) 00:18:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "6c06b1d861"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) [ 1131.422339][ T116] usb 1-1: 0:2 : does not exist [ 1131.506247][ T3560] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1131.599519][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:51 executing program 1: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) [ 1131.672222][ T5724] usb 4-1: new full-speed USB device number 27 using dummy_hcd 00:18:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r2, 0x8915, &(0x7f0000000540)={0x0, @can, @nl=@unspec, @l2={0x1f, 0x0, @fixed}}) [ 1131.763236][ T3560] usb 6-1: Using ep0 maxpacket: 8 [ 1131.844178][ T3567] usb 1-1: USB disconnect, device number 29 [ 1131.882968][ T3560] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.894946][ T3560] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.905004][ T3560] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:18:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22040fb5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0x280076ed, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a40c1, 0x103}}], 0x10002, 0x0, 0x0) dup2(r1, r3) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@can, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/181, 0xb5}, 0x6}], 0x2, 0x0, 0x0) dup2(r1, r2) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669643d307747fc44adbb0989d965aaf80a25a3c61fee958800000000000000001a253d05b12acf"]) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x1, 0x42, &(0x7f0000000380)={r5, r6+60000000}) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) 00:18:52 executing program 1: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) [ 1132.203217][ T5724] usb 4-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=4c.be [ 1132.213124][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.221356][ T5724] usb 4-1: Product: syz [ 1132.225800][ T5724] usb 4-1: Manufacturer: syz [ 1132.230523][ T5724] usb 4-1: SerialNumber: syz [ 1132.238476][ T3560] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1132.248676][ T3560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.259065][ T3560] usb 6-1: Product: syz [ 1132.264652][ T3560] usb 6-1: Manufacturer: syz [ 1132.269388][ T3560] usb 6-1: SerialNumber: syz [ 1132.361394][ T5724] usb 4-1: config 0 descriptor?? [ 1132.454382][ T5724] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. 00:18:52 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c24020000000000000000000624050200020924030004030002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001e40)={0x14, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f8a68f7bf01a76}}}, 0x0) [ 1132.622917][ T5724] gp8psk: usb in 128 operation failed. [ 1132.643183][ T3560] usbhid 6-1:1.0: can't add hid device: -22 [ 1132.649630][ T3560] usbhid: probe of 6-1:1.0 failed with error -22 [ 1132.772486][ T3560] usb 6-1: USB disconnect, device number 21 [ 1133.142589][ T5724] gp8psk: usb in 146 operation failed. [ 1133.148167][ T5724] gp8psk: failed to get FW version [ 1133.192594][ T5724] gp8psk: FPGA Version = 158 [ 1133.372316][ T3567] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1133.413004][ T5724] gp8psk: usb in 138 operation failed. [ 1133.418586][ T5724] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1133.429278][ T5724] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver error while loading driver (-19) [ 1133.532947][ T5724] usb 4-1: USB disconnect, device number 27 [ 1133.629185][T12623] not chained 60000 origins [ 1133.634100][T12623] CPU: 0 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1133.642993][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.653076][T12623] Call Trace: [ 1133.656373][T12623] [ 1133.659322][T12623] dump_stack_lvl+0x1ff/0x28e [ 1133.664063][T12623] dump_stack+0x25/0x28 [ 1133.668274][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1133.674234][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.679397][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1133.685266][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1133.690863][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.696027][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1133.701887][T12623] ? should_fail+0x75/0x9c0 [ 1133.706435][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.711594][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1133.717891][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1133.724017][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.729184][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1133.735051][T12623] __msan_chain_origin+0xbf/0x140 [ 1133.740127][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1133.745302][T12623] get_compat_msghdr+0x108/0x2c0 [ 1133.750294][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1133.755207][T12623] do_recvmmsg+0xd77/0x2120 [ 1133.759765][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.764950][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1133.770827][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1133.775992][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1133.782377][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1133.788938][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1133.793692][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1133.800087][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1133.805084][T12623] entry_INT80_compat+0x71/0x76 [ 1133.809980][T12623] RIP: 0023:0xf6e75549 [ 1133.814069][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1133.833812][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1133.842271][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1133.850283][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1133.858289][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1133.866378][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1133.874413][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.882433][T12623] [ 1133.888310][T12623] Uninit was stored to memory at: [ 1133.893923][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1133.899077][T12623] get_compat_msghdr+0x108/0x2c0 [ 1133.904156][T12623] do_recvmmsg+0xd77/0x2120 [ 1133.908719][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1133.913538][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1133.919917][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1133.925016][T12623] entry_INT80_compat+0x71/0x76 [ 1133.929915][T12623] [ 1133.932338][T12623] Uninit was stored to memory at: [ 1133.937420][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1133.942652][T12623] get_compat_msghdr+0x108/0x2c0 [ 1133.947645][T12623] do_recvmmsg+0xd77/0x2120 [ 1133.952302][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1133.957028][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1133.963495][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1133.968501][T12623] entry_INT80_compat+0x71/0x76 [ 1133.973488][T12623] [ 1133.975818][T12623] Uninit was stored to memory at: [ 1133.980901][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1133.986148][T12623] get_compat_msghdr+0x108/0x2c0 [ 1133.991131][T12623] do_recvmmsg+0xd77/0x2120 [ 1133.995780][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.000507][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1134.007064][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1134.012143][T12623] entry_INT80_compat+0x71/0x76 [ 1134.017044][T12623] [ 1134.019378][T12623] Uninit was stored to memory at: [ 1134.024556][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1134.029714][T12623] get_compat_msghdr+0x108/0x2c0 [ 1134.034791][T12623] do_recvmmsg+0xd77/0x2120 [ 1134.039342][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.044161][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1134.050623][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1134.055717][T12623] entry_INT80_compat+0x71/0x76 [ 1134.060615][T12623] [ 1134.063038][T12623] Uninit was stored to memory at: [ 1134.068124][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1134.073363][T12623] get_compat_msghdr+0x108/0x2c0 [ 1134.078343][T12623] do_recvmmsg+0xd77/0x2120 [ 1134.082979][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.087717][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1134.094194][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1134.099184][T12623] entry_INT80_compat+0x71/0x76 [ 1134.104176][T12623] [ 1134.106509][T12623] Uninit was stored to memory at: [ 1134.111588][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1134.116819][T12623] get_compat_msghdr+0x108/0x2c0 [ 1134.121969][T12623] do_recvmmsg+0xd77/0x2120 [ 1134.126521][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.131250][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1134.137814][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1134.143258][T12623] entry_INT80_compat+0x71/0x76 [ 1134.148244][T12623] [ 1134.150574][T12623] Uninit was stored to memory at: [ 1134.155750][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1134.160905][T12623] get_compat_msghdr+0x108/0x2c0 [ 1134.165983][T12623] do_recvmmsg+0xd77/0x2120 [ 1134.170535][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.175352][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 00:18:54 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:18:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 00:18:54 executing program 1: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) 00:18:54 executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0x5c, 0x3d, 0x10, 0x9c0, 0x202, 0x4cbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa6, 0xc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000001440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x0, 0x0, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b40)={0x44, &(0x7f0000001740)={0x0, 0x0, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1134.181881][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1134.186879][T12623] entry_INT80_compat+0x71/0x76 [ 1134.191886][T12623] [ 1134.194224][T12623] Local variable msg_sys created at: [ 1134.199516][T12623] do_recvmmsg+0xbb/0x2120 [ 1134.204072][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1134.208906][ T3567] usb 1-1: Using ep0 maxpacket: 8 [ 1134.362907][ T3567] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.373397][ T3567] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 00:18:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x5}]}}}]}, 0x40}}, 0x0) 00:18:54 executing program 1: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) [ 1134.583278][ T5220] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1134.622538][ T3567] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.632204][ T3567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.640352][ T3567] usb 1-1: Product: syz [ 1134.644738][ T3567] usb 1-1: Manufacturer: syz [ 1134.649445][ T3567] usb 1-1: SerialNumber: syz 00:18:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) [ 1134.832509][ T5724] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1134.872149][ T5220] usb 6-1: Using ep0 maxpacket: 8 [ 1134.992996][ T5220] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.004524][ T5220] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.014564][ T5220] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:18:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) [ 1135.216370][ T3567] usb 1-1: 0:2 : does not exist [ 1135.222493][ T5220] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 1135.233474][ T5220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.241623][ T5220] usb 6-1: Product: syz [ 1135.246460][ T5220] usb 6-1: Manufacturer: syz [ 1135.251183][ T5220] usb 6-1: SerialNumber: syz 00:18:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) close(r0) [ 1135.353042][ T5724] usb 4-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=4c.be [ 1135.362534][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.370677][ T5724] usb 4-1: Product: syz [ 1135.375979][ T5724] usb 4-1: Manufacturer: syz [ 1135.380705][ T5724] usb 4-1: SerialNumber: syz [ 1135.574256][ T5724] usb 4-1: config 0 descriptor?? [ 1135.613385][ T5220] usbhid 6-1:1.0: can't add hid device: -22 [ 1135.619636][ T5220] usbhid: probe of 6-1:1.0 failed with error -22 [ 1135.624356][ T5724] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver' in warm state. [ 1135.655914][ T3567] usb 1-1: USB disconnect, device number 30 [ 1135.669937][ T5220] usb 6-1: USB disconnect, device number 22 [ 1135.747299][ T7964] udevd[7964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.833900][ T5724] gp8psk: usb in 128 operation failed. [ 1136.049351][T12623] not chained 70000 origins [ 1136.054480][T12623] CPU: 0 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1136.063291][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.073472][T12623] Call Trace: [ 1136.076768][T12623] [ 1136.079713][T12623] dump_stack_lvl+0x1ff/0x28e [ 1136.084457][T12623] dump_stack+0x25/0x28 [ 1136.088667][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1136.094535][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.099793][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1136.105663][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1136.111260][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.116786][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1136.122652][T12623] ? should_fail+0x75/0x9c0 [ 1136.127204][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.132351][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1136.138652][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1136.144778][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.149942][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1136.155807][T12623] __msan_chain_origin+0xbf/0x140 [ 1136.160903][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.166060][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.171050][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1136.175959][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.180520][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.185702][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1136.191569][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1136.196725][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1136.203042][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.209629][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.214377][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.220763][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.225755][T12623] entry_INT80_compat+0x71/0x76 [ 1136.230761][T12623] RIP: 0023:0xf6e75549 [ 1136.234861][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1136.254698][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1136.263161][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1136.271264][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.279270][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.287260][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1136.295265][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.303290][T12623] [ 1136.309301][T12623] Uninit was stored to memory at: [ 1136.314813][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.319969][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.322278][ T5724] gp8psk: usb in 146 operation failed. [ 1136.325032][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.330441][ T5724] gp8psk: failed to get FW version [ 1136.335012][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.335070][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.335124][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.335178][T12623] entry_INT80_compat+0x71/0x76 [ 1136.335234][T12623] [ 1136.335242][T12623] Uninit was stored to memory at: [ 1136.335303][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.335347][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.335391][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.335444][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.335497][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.394916][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.399912][T12623] entry_INT80_compat+0x71/0x76 [ 1136.403895][ T5724] gp8psk: FPGA Version = 158 [ 1136.404966][T12623] [ 1136.404974][T12623] Uninit was stored to memory at: [ 1136.405039][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.422182][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.427186][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.432062][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.436792][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.443337][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.448329][T12623] entry_INT80_compat+0x71/0x76 [ 1136.453388][T12623] [ 1136.455714][T12623] Uninit was stored to memory at: [ 1136.460801][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.466099][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.471075][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.475793][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.480537][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.487112][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.492199][T12623] entry_INT80_compat+0x71/0x76 [ 1136.497105][T12623] [ 1136.499446][T12623] Uninit was stored to memory at: [ 1136.504683][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.509835][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.514959][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.519518][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.524399][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.530781][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.535927][T12623] entry_INT80_compat+0x71/0x76 [ 1136.540913][T12623] [ 1136.543403][T12623] Uninit was stored to memory at: [ 1136.548489][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.553794][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.558865][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.563571][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.568306][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.574835][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.579828][T12623] entry_INT80_compat+0x71/0x76 [ 1136.582550][ T5724] gp8psk: usb in 138 operation failed. [ 1136.584877][T12623] [ 1136.590217][ T5724] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1136.592616][T12623] Uninit was stored to memory at: [ 1136.592684][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1136.603384][ T5724] dvb-usb: Genpix 8PSK-to-USB2 Rev.2 DVB-S receiver error while loading driver (-19) [ 1136.608108][T12623] get_compat_msghdr+0x108/0x2c0 [ 1136.627807][T12623] do_recvmmsg+0xd77/0x2120 [ 1136.632513][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.637249][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1136.643778][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1136.649209][T12623] entry_INT80_compat+0x71/0x76 [ 1136.654319][T12623] [ 1136.656656][T12623] Local variable msg_sys created at: [ 1136.662090][T12623] do_recvmmsg+0xbb/0x2120 [ 1136.666561][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1136.826490][ T5724] usb 4-1: USB disconnect, device number 28 [ 1137.113252][T12623] not chained 80000 origins [ 1137.117809][T12623] CPU: 1 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1137.126611][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.136681][T12623] Call Trace: [ 1137.139968][T12623] [ 1137.142905][T12623] dump_stack_lvl+0x1ff/0x28e [ 1137.147629][T12623] dump_stack+0x25/0x28 [ 1137.151837][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1137.157614][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.162777][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.168650][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1137.174251][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.179417][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.185286][T12623] ? should_fail+0x75/0x9c0 [ 1137.189926][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.195096][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1137.201482][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1137.207609][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.212800][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.218664][T12623] __msan_chain_origin+0xbf/0x140 [ 1137.223740][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.228917][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.233900][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1137.238805][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.243352][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.248528][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.254392][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.259548][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1137.265836][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.272382][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.277118][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.283524][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.288511][T12623] entry_INT80_compat+0x71/0x76 [ 1137.293400][T12623] RIP: 0023:0xf6e75549 [ 1137.297492][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1137.317133][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1137.325590][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1137.333604][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1137.341593][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.349583][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1137.357575][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.365579][T12623] [ 1137.372449][T12623] Uninit was stored to memory at: [ 1137.391369][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.397222][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.402321][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.406886][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.411635][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.418141][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.423234][T12623] entry_INT80_compat+0x71/0x76 [ 1137.428139][T12623] [ 1137.430485][T12623] Uninit was stored to memory at: [ 1137.435690][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.440836][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.445952][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.450515][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.455346][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.461722][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.466836][T12623] entry_INT80_compat+0x71/0x76 [ 1137.471921][T12623] [ 1137.474261][T12623] Uninit was stored to memory at: [ 1137.479343][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.484690][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.489667][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.494412][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.499136][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.505637][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.510637][T12623] entry_INT80_compat+0x71/0x76 [ 1137.515729][T12623] [ 1137.518059][T12623] Uninit was stored to memory at: [ 1137.523329][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.528552][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.533730][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.538299][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.543205][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.549602][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.554772][T12623] entry_INT80_compat+0x71/0x76 [ 1137.560012][T12623] [ 1137.562463][T12623] Uninit was stored to memory at: [ 1137.567644][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.572974][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.577947][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.582629][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.587361][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.593939][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.598931][T12623] entry_INT80_compat+0x71/0x76 [ 1137.604115][T12623] [ 1137.606465][T12623] Uninit was stored to memory at: [ 1137.611555][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.616890][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.621958][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.626516][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.631239][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.637814][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.642914][T12623] entry_INT80_compat+0x71/0x76 [ 1137.647817][T12623] [ 1137.650159][T12623] Uninit was stored to memory at: [ 1137.655425][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1137.660577][T12623] get_compat_msghdr+0x108/0x2c0 [ 1137.665693][T12623] do_recvmmsg+0xd77/0x2120 [ 1137.670257][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.675156][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1137.681560][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1137.686830][T12623] entry_INT80_compat+0x71/0x76 [ 1137.691738][T12623] [ 1137.694272][T12623] Local variable msg_sys created at: [ 1137.699656][T12623] do_recvmmsg+0xbb/0x2120 [ 1137.704346][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1137.885572][T12623] not chained 90000 origins [ 1137.892240][T12623] CPU: 1 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1137.901055][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.911129][T12623] Call Trace: [ 1137.914409][T12623] [ 1137.917445][T12623] dump_stack_lvl+0x1ff/0x28e [ 1137.922153][T12623] dump_stack+0x25/0x28 [ 1137.926342][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1137.932095][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.937249][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.943097][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1137.948675][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.953814][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.959660][T12623] ? should_fail+0x75/0x9c0 [ 1137.964205][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.969350][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1137.975638][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1137.981861][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1137.987000][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1137.992842][T12623] __msan_chain_origin+0xbf/0x140 [ 1137.998135][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.003300][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.008273][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1138.013161][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.017693][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.022942][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1138.028791][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.034106][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1138.040380][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.046912][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.051646][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.058030][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.062995][T12623] entry_INT80_compat+0x71/0x76 [ 1138.067866][T12623] RIP: 0023:0xf6e75549 [ 1138.071932][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1138.091570][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1138.100000][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1138.107986][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.115972][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.123950][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1138.131931][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.139920][T12623] [ 1138.146836][T12623] Uninit was stored to memory at: [ 1138.152521][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.157675][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.157722][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.157775][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.157837][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.157893][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.157951][T12623] entry_INT80_compat+0x71/0x76 [ 1138.189981][T12623] [ 1138.192500][T12623] Uninit was stored to memory at: [ 1138.197591][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.202938][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.207920][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.212693][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.217418][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.223912][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.228901][T12623] entry_INT80_compat+0x71/0x76 [ 1138.233971][T12623] [ 1138.236304][T12623] Uninit was stored to memory at: [ 1138.241372][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.246741][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.251721][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.256409][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.261135][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.267632][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.272716][T12623] entry_INT80_compat+0x71/0x76 [ 1138.277610][T12623] [ 1138.279953][T12623] Uninit was stored to memory at: [ 1138.285216][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.290366][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.295482][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.300041][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.304910][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.311288][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.316444][T12623] entry_INT80_compat+0x71/0x76 [ 1138.321341][T12623] [ 1138.323819][T12623] Uninit was stored to memory at: [ 1138.328892][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.334206][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.339179][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.343903][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.348630][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.355124][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.360113][T12623] entry_INT80_compat+0x71/0x76 [ 1138.365180][T12623] [ 1138.367512][T12623] Uninit was stored to memory at: [ 1138.372768][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.377922][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.383073][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.387640][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.392527][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.398910][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.404180][T12623] entry_INT80_compat+0x71/0x76 [ 1138.409086][T12623] [ 1138.411412][T12623] Uninit was stored to memory at: [ 1138.416649][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.421905][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.426889][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.431444][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.436344][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.442854][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.447845][T12623] entry_INT80_compat+0x71/0x76 [ 1138.452948][T12623] [ 1138.455307][T12623] Local variable msg_sys created at: [ 1138.460599][T12623] do_recvmmsg+0xbb/0x2120 [ 1138.465201][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.648838][T12623] not chained 100000 origins [ 1138.653562][T12623] CPU: 1 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1138.662343][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.672439][T12623] Call Trace: [ 1138.675716][T12623] [ 1138.678659][T12623] dump_stack_lvl+0x1ff/0x28e [ 1138.683366][T12623] dump_stack+0x25/0x28 [ 1138.687540][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1138.693374][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.698681][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1138.704525][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1138.710095][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.715255][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1138.721087][T12623] ? should_fail+0x75/0x9c0 [ 1138.725608][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.730735][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1138.736999][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1138.743101][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.748235][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1138.754063][T12623] __msan_chain_origin+0xbf/0x140 [ 1138.759107][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.764246][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.769201][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1138.774076][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.778599][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.783742][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1138.789581][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1138.794713][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1138.800980][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.807507][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.812231][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.818616][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.823581][T12623] entry_INT80_compat+0x71/0x76 [ 1138.828453][T12623] RIP: 0023:0xf6e75549 [ 1138.832535][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1138.852160][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1138.860603][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1138.868579][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.876564][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.884627][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1138.892600][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.900587][T12623] [ 1138.908901][T12623] Uninit was stored to memory at: [ 1138.917250][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.922838][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.927834][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.932522][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.937255][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.943785][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.948785][T12623] entry_INT80_compat+0x71/0x76 [ 1138.953903][T12623] [ 1138.956238][T12623] Uninit was stored to memory at: [ 1138.961322][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1138.966673][T12623] get_compat_msghdr+0x108/0x2c0 [ 1138.971661][T12623] do_recvmmsg+0xd77/0x2120 [ 1138.976426][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1138.981156][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1138.987689][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1138.992809][T12623] entry_INT80_compat+0x71/0x76 [ 1138.997705][T12623] [ 1139.000017][T12623] Uninit was stored to memory at: [ 1139.005269][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.010457][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.015582][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.020130][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.025016][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.031386][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.036543][T12623] entry_INT80_compat+0x71/0x76 [ 1139.041438][T12623] [ 1139.043926][T12623] Uninit was stored to memory at: [ 1139.048993][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.054247][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.059225][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.063910][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.068629][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.075178][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.080157][T12623] entry_INT80_compat+0x71/0x76 [ 1139.085153][T12623] [ 1139.087477][T12623] Uninit was stored to memory at: [ 1139.092713][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.097857][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.102995][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.107541][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.112423][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.118811][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.124000][T12623] entry_INT80_compat+0x71/0x76 [ 1139.128908][T12623] [ 1139.131235][T12623] Uninit was stored to memory at: [ 1139.136445][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.141592][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.146726][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.151297][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.156203][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.162687][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.167679][T12623] entry_INT80_compat+0x71/0x76 [ 1139.172736][T12623] [ 1139.175073][T12623] Uninit was stored to memory at: [ 1139.180141][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.185458][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.190514][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.195237][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.199964][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.206516][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.211506][T12623] entry_INT80_compat+0x71/0x76 [ 1139.216525][T12623] [ 1139.218860][T12623] Local variable msg_sys created at: [ 1139.224308][T12623] do_recvmmsg+0xbb/0x2120 [ 1139.228773][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.403646][T12623] not chained 110000 origins [ 1139.408286][T12623] CPU: 0 PID: 12623 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1139.417086][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.427167][T12623] Call Trace: [ 1139.430461][T12623] [ 1139.433407][T12623] dump_stack_lvl+0x1ff/0x28e [ 1139.438137][T12623] dump_stack+0x25/0x28 [ 1139.442314][T12623] kmsan_internal_chain_origin+0x78/0x110 [ 1139.448088][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.453226][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1139.459085][T12623] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1139.464673][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.469832][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1139.475690][T12623] ? should_fail+0x75/0x9c0 [ 1139.480232][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.485386][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1139.491769][T12623] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1139.497884][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.503032][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1139.508883][T12623] __msan_chain_origin+0xbf/0x140 [ 1139.513947][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.519116][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.524095][T12623] ? __sys_recvmmsg+0x51c/0x6f0 [ 1139.529000][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.533549][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.538722][T12623] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1139.544582][T12623] ? kmsan_get_metadata+0x33/0x220 [ 1139.549755][T12623] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1139.556029][T12623] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.562589][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.567330][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.573718][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.578750][T12623] entry_INT80_compat+0x71/0x76 [ 1139.583644][T12623] RIP: 0023:0xf6e75549 [ 1139.587729][T12623] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1139.607386][T12623] RSP: 002b:00000000f586f5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1139.615843][T12623] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020005540 [ 1139.623847][T12623] RDX: 0000000000010002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.631860][T12623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.639877][T12623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1139.647874][T12623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.655873][T12623] [ 1139.664309][T12623] Uninit was stored to memory at: [ 1139.669423][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.675239][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.680228][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.684887][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.689616][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.696087][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.701076][T12623] entry_INT80_compat+0x71/0x76 [ 1139.706128][T12623] [ 1139.708460][T12623] Uninit was stored to memory at: [ 1139.713698][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.718848][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.723940][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.728499][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.733354][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.739734][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.744876][T12623] entry_INT80_compat+0x71/0x76 [ 1139.749775][T12623] [ 1139.752252][T12623] Uninit was stored to memory at: [ 1139.757334][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.762630][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.767604][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.772265][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.776985][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.783510][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.788495][T12623] entry_INT80_compat+0x71/0x76 [ 1139.793540][T12623] [ 1139.795869][T12623] Uninit was stored to memory at: [ 1139.800944][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.806246][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.811219][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.815908][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.820630][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.827120][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.832199][T12623] entry_INT80_compat+0x71/0x76 [ 1139.837104][T12623] [ 1139.839429][T12623] Uninit was stored to memory at: [ 1139.844659][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.849811][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.854922][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.859501][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.864358][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.870770][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.875859][T12623] entry_INT80_compat+0x71/0x76 [ 1139.880759][T12623] [ 1139.883226][T12623] Uninit was stored to memory at: [ 1139.888293][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.893570][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.898543][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.903245][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.907969][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.914495][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.919505][T12623] entry_INT80_compat+0x71/0x76 [ 1139.924537][T12623] [ 1139.926893][T12623] Uninit was stored to memory at: [ 1139.932097][T12623] __get_compat_msghdr+0x6e1/0x9d0 [ 1139.937248][T12623] get_compat_msghdr+0x108/0x2c0 [ 1139.942380][T12623] do_recvmmsg+0xd77/0x2120 [ 1139.946933][T12623] __sys_recvmmsg+0x51c/0x6f0 [ 1139.951654][T12623] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1139.958153][T12623] do_int80_syscall_32+0x4e/0xa0 [ 1139.963495][T12623] entry_INT80_compat+0x71/0x76 [ 1139.968387][T12623] [ 1139.970702][T12623] Local variable msg_sys created at: [ 1139.976149][T12623] do_recvmmsg+0xbb/0x2120 [ 1139.980632][T12623] __sys_recvmmsg+0x51c/0x6f0 00:19:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000004000007110a70000000000c60000000004000095000e8800000000000058bc658bbec955ff20831cd876b0ae23dbe9362a308865670d107ea73c2dc2ebf5e44ff436611ab3d1359c497cd45306cfea154ec088466478490247a078bedab2cc41f789a91e9221309332cbd7817dbc39894281b9d3a514fe2357647185593109b6f2da11887cff2797dae1844d207668f397678c51c11c3098c2ff04f3593e8bbb3760882abce0b62096c78ff98e388ade0d315caa7ca8d0da43e2c39dc014"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000222c0)=ANY=[@ANYBLOB="74410100300001"], 0x14174}}, 0x0) 00:19:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x4}]}}}]}, 0x44}}, 0x0) 00:19:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffdb2, 0x0, 0x0}) 00:19:00 executing program 0: r0 = syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902930003010000000904000000010100000a24010000000201020f2406fe00040000000000000200000a2407000000001146a60c24020000000000000000000624050200020924030004030002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001e40)={0x14, 0x0, &(0x7f0000001e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f8a68f7bf01a76}}}, 0x0) 00:19:00 executing program 5: syz_mount_image$udf(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='shortad']) 00:19:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x20000600) ioctl$TCSETS(r0, 0x541d, 0x0) [ 1140.257772][T12657] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1140.265754][T12657] UDF-fs: Scanning with blocksize 512 failed [ 1140.268030][T12655] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 1140.284660][T12656] usb usb9: usbfs: process 12656 (syz-executor.1) did not claim interface 0 before use 00:19:00 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) read(r0, &(0x7f0000000000)=""/176, 0x1001) [ 1140.358327][T12657] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1140.366289][T12657] UDF-fs: Scanning with blocksize 1024 failed 00:19:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="9e94a2343dbb", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:19:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x44, r1, 0x109, 0x0, 0x0, {0x39}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) [ 1140.468969][T12657] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1140.477683][T12657] UDF-fs: Scanning with blocksize 2048 failed [ 1140.530851][ T3567] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1140.540913][T12657] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 1140.549229][T12657] UDF-fs: Scanning with blocksize 4096 failed [ 1140.613768][T12661] netlink: 82272 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000004000007110a70000000000c60000000004000095000e8800000000000058bc658bbec955ff20831cd876b0ae23dbe9362a308865670d107ea73c2dc2ebf5e44ff436611ab3d1359c497cd45306cfea154ec088466478490247a078bedab2cc41f789a91e9221309332cbd7817dbc39894281b9d3a514fe2357647185593109b6f2da11887cff2797dae1844d207668f397678c51c11c3098c2ff04f3593e8bbb3760882abce0b62096c78ff98e388ade0d315caa7ca8d0da43e2c39dc014"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000222c0)=ANY=[@ANYBLOB="74410100300001"], 0x14174}}, 0x0) [ 1140.802675][ T3567] usb 1-1: Using ep0 maxpacket: 8 00:19:00 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000040)=0x7fff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0xfff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)) 00:19:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@random="c9", 0x1, 0xfcfdffff00000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00180095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2a, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={0x0}}, 0x4000000) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x891) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0400c4}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xe4, r1, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cece54de6924cfb1dcff2abed627da8f46aba0f6d1962a45"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x4c050) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 00:19:01 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/271, 0x10f}], 0x2, 0x300000, 0x0) 00:19:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001180)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @dev, r1}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @dev}, 0xc) [ 1140.924337][ T3567] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.934667][ T3567] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.143608][ T3567] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.153274][ T3567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.161534][ T3567] usb 1-1: Product: syz [ 1141.162297][T12669] netlink: 82272 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1141.167781][ T3567] usb 1-1: Manufacturer: syz [ 1141.180395][ T3567] usb 1-1: SerialNumber: syz 00:19:01 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) [ 1141.852884][ T3567] usb 1-1: 0:2 : does not exist [ 1142.358519][ T3567] usb 1-1: USB disconnect, device number 31 00:19:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000004000007110a70000000000c60000000004000095000e8800000000000058bc658bbec955ff20831cd876b0ae23dbe9362a308865670d107ea73c2dc2ebf5e44ff436611ab3d1359c497cd45306cfea154ec088466478490247a078bedab2cc41f789a91e9221309332cbd7817dbc39894281b9d3a514fe2357647185593109b6f2da11887cff2797dae1844d207668f397678c51c11c3098c2ff04f3593e8bbb3760882abce0b62096c78ff98e388ade0d315caa7ca8d0da43e2c39dc014"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000222c0)=ANY=[@ANYBLOB="74410100300001"], 0x14174}}, 0x0) 00:19:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_LAPIC(r6, 0xc008ae88, &(0x7f0000000100)={"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"}) ioctl$sock_ifreq(r6, 0x8991, &(0x7f0000000200)={'syzkaller1\x00', @ifru_ivalue=0xe07}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x22020, 0x4a302}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 00:19:02 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x841, 0x0) 00:19:02 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000040)=0x7fff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0xfff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)) 00:19:02 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1b}}, 0x0) [ 1143.074199][T12692] netlink: 82272 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="00000f000000000001000006dc140409b491"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc018480d, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2}) 00:19:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x76e84b772568d3f9, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x7f}}, 0x1c}}, 0x0) 00:19:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc33020}}) 00:19:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000004000007110a70000000000c60000000004000095000e8800000000000058bc658bbec955ff20831cd876b0ae23dbe9362a308865670d107ea73c2dc2ebf5e44ff436611ab3d1359c497cd45306cfea154ec088466478490247a078bedab2cc41f789a91e9221309332cbd7817dbc39894281b9d3a514fe2357647185593109b6f2da11887cff2797dae1844d207668f397678c51c11c3098c2ff04f3593e8bbb3760882abce0b62096c78ff98e388ade0d315caa7ca8d0da43e2c39dc014"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000222c0)=ANY=[@ANYBLOB="74410100300001"], 0x14174}}, 0x0) 00:19:03 executing program 3: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000001740)=[{&(0x7f0000000040)='5', 0x1}], 0x300, 0x0, 0x6, 0x0) 00:19:03 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000040)=0x7fff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0xfff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)) 00:19:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x1, 0x2) write$sysctl(r0, &(0x7f0000000440)='5\x00', 0x5) read$FUSE(r0, &(0x7f0000002b80)={0x2020}, 0x2020) [ 1143.818176][T12701] netlink: 82272 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, 0x0, 0x0) [ 1143.882807][ T5724] usb 2-1: new high-speed USB device number 29 using dummy_hcd 00:19:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x8, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) 00:19:04 executing program 3: r0 = syz_io_uring_setup(0x1c7f, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, 0x0, 0x0) [ 1144.243106][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.254809][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.264853][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1144.278029][ T5724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1144.287387][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 1144.349001][ T5724] usb 2-1: config 0 descriptor?? [ 1144.580396][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1144.590059][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1144.599649][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:04 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000040)=0x7fff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0xfff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)) [ 1144.857908][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.866408][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.874147][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.881992][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.889616][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.897412][ T5724] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1144.989056][ T5724] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 1145.073264][ T5724] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1145.175869][ T5724] usb 2-1: USB disconnect, device number 29 00:19:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 00:19:05 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0), 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 00:19:05 executing program 2: r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x8000}}, {0x8, 0x9, 0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mount$bpf(0x20000000, &(0x7f0000000640)='./file0\x00', 0x0, 0x80000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_config_ext={0xff, 0x3f}, 0xc206, 0x0, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) truncate(&(0x7f0000000480)='./file0\x00', 0x59c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x2000c811}, 0x48010) r5 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f00000004c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ffa1d000000000000ad25822a17b17f463e104179c19c2ad2fbddc0777df2ec4f62826086704d", 0x69, 0x5fe}, {0x0, 0x0, 0x10dfc}], 0x28104c0, &(0x7f00000005c0)={[{@fat=@umask={'umask', 0x3d, 0x3}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_win95}, {@uni_xlateno}]}) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x2300) mknodat$loop(r5, &(0x7f0000000100)='./file0\x00', 0x10, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r4, @ANYBLOB="01ab59f17084684f3c8400001d8a6815853a1bb000000000004900edffffffa8332acd2140bf5162060081ffffffff00"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000dc0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES16=r0, @ANYRES32=r1, @ANYRES32, @ANYRESDEC, @ANYBLOB="a03c05e01062bdcd5bc26e6d031d10682da0b818c94e9b79cc235e5501b466769c159a221290f37e2158418d3fa3ba790cd09b62b1bbcd6ba777e308be2b2027c26996bbb8d8ec420511293c01b27a91198d709f114b51c912228b79b28444ca81e4c03413d47183204858898a241dec19be1e29a3f19d2d0f2fe123a1446fa80fc26fc38c09c6a664580e7c75386ef018683dedd6685caaff99b2a57dc7f36b8e125dbedd9f61256d138f6263a43a65036ec723de0bb6a6318e0cc83e9dac66ea8e1a90cb"], 0x150}}, 0x1) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00') sendto(r2, &(0x7f0000000a80)="b09f159ae471e7333a090ec33a14e3ddd5ac0dc98f5cf1da8cbcbf1b37c17195fbf6ff07000000000000ba9900f57ae34eaf2fa4f65b93b56c7d5a081e2d923106ccfda7b087b34e4bcd551d387c76f0920bfaf9067d35dd49573c29fa38cd5e128d6d850ef03b73f25a77215fa4adcfb405a7fd71a01b29d0e45ce617370581bdf3a9de1290fbae6a50fcfc3dd76a836711d95104b042357b59a19cabce24b636b66288f5ffa2fdd6384856c91c9cde4bdeb2b514f0b2e08e0f3a0f5a2f258655fb487a058b5d77b1ada1a66e0b43da7ad3f0b083b589ddb5a168a6464aec06862b67c90014b5be41facba76a2b630f6f92ab40feb51b6d2e697299252d86ed1a2215f00d3d8ba120a2bbc72693a33bccc66032e8fef123fb2ae415d82b66e4e4c87f41ab334b1f2f5536ca83b7e093ff03000000000000fbf96b01c01bd157dba65092ab0b0072a3c462edcdf55c17f9d6ae0ef45d159717f05bf632040a37e5516ad7253c3bde4d7011e6235fb99fbf0b6663ea63f0b5f133b4d921ca577827ab7c72fe54a3e34908eae44ad1a5181dc2c0ec8ce0cdde93c092d1f5a4ae00139390b0ff122eb4624bb50ffec5454fd4f99cb6bbe479246edd46437bd4b8ae5ebc4c3056b40e2c528a9f6d5ab1e2899f8f0b96f364e3c8c070ace668ced78da2a59d83b56ec76f7a58b292164d488bb28ca9328d4a5115e328a91b1c036a3b2b196aa2e64b4a2249cf936e91a9ec1ba85a1345cc85a4520b0be4f0c7d3e5041de36e308d53380c30da079f8d47534000947695ee32ef3de37fd77d6b2632dd9565b6ad422f0c724572a9d9c6280d5ba91b2200626fa88191edbed0513207cce502a782d39c48538cf26936ecbf109910c3bc2404540b00e9ef5058f3f7d8c4c23b612abc", 0x285, 0x88d1, &(0x7f0000000a00)=@un=@file={0x1, './file0\x00'}, 0x80) 00:19:05 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="0623", 0x5a0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 00:19:05 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002600)) 00:19:05 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1145.794111][T12731] loop2: detected capacity change from 0 to 269 [ 1145.986379][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1145.996306][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 00:19:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0xc00}) 00:19:06 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 00:19:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x74}}, 0x0) 00:19:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1b, &(0x7f0000000000)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, 0xe4) 00:19:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x40}}, 0x0) 00:19:06 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 00:19:07 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @random="b136721a11c0", @multicast1}}}}, 0x0) [ 1146.954372][T12738] batman_adv: batadv0: Removing interface: batadv_slave_0 00:19:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x68}}, 0x0) 00:19:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 00:19:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c40000000000000109022400010000000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000002340)={0x0, 0x22, 0x9, {[@main, @local=@item_012={0x2, 0x2, 0x0, "a1f6"}, @main=@item_4={0x3, 0x0, 0x8, "0c776a89"}]}}, 0x0}, 0x0) 00:19:07 executing program 3: syz_clone3(&(0x7f0000000080)={0xb048100, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:19:07 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 00:19:07 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000700)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @broadcast}, "0df5e01f865b7289"}}}}}, 0x0) 00:19:07 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0)) [ 1147.567114][T12762] sctp: [Deprecated]: syz-executor.2 (pid 12762) Use of int in max_burst socket option deprecated. [ 1147.567114][T12762] Use struct sctp_assoc_value instead 00:19:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x64, r3, 0x403, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x48, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2075349aece7ce1a5aa6721777030f74"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x64}}, 0x0) [ 1147.682061][ T5724] usb 2-1: new high-speed USB device number 30 using dummy_hcd 00:19:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0205647, &(0x7f0000000140)={0xf010000, @vbi}) 00:19:07 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 00:19:08 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x610000, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000340)={[{0x6, 0x0, 0x5b, 0x9, 0x40, 0x80, 0x40, 0x3, 0x0, 0x3, 0x0, 0x2}, {0x5ab, 0x40, 0x6, 0x3, 0x6, 0x5, 0x0, 0x3, 0x47, 0x1, 0x1, 0x1, 0x4}, {0x0, 0x3, 0x0, 0x2, 0x3a, 0x4, 0x8, 0x5, 0x0, 0x1f, 0xff}], 0x48d6}) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) creat(&(0x7f0000000240)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') tkill(0x0, 0x40000) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x40, 0x5}, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x8, 0x0) acct(&(0x7f0000000100)='./file0\x00') r2 = gettid() tkill(r2, 0x1000000000016) 00:19:08 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0009000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) setfsgid(0x0) [ 1148.042482][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.053972][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.064029][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1148.077150][ T5724] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1148.086566][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018008102e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc000900b800409925000000160012400a00fe8000000000000005000600020003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d021f003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3081ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x7}, 0x0) 00:19:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x1, 'ip6tnl0\x00', {}, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x7, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/405], 0x210) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sync() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sync() bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 1148.319983][ T5724] usb 2-1: config 0 descriptor?? [ 1148.798422][ T5724] wacom 0003:056A:00C4.001C: unknown main item tag 0x0 [ 1148.882285][ T5724] wacom 0003:056A:00C4.001C: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 1148.997218][ T5724] usb 2-1: USB disconnect, device number 30 00:19:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018008102e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc000900b800409925000000160012400a00fe8000000000000005000600020003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d021f003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3081ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x7}, 0x0) 00:19:09 executing program 5: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1d000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000e18000/0xc000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000907000/0x1000)=nil, &(0x7f0000ace000/0x1000)=nil, &(0x7f0000ab7000/0x1000)=nil, &(0x7f00009d1000/0x4000)=nil, &(0x7f00008f2000/0x3000)=nil, &(0x7f0000c6a000/0x2000)=nil, &(0x7f00009f1000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000c57000/0x3000)=nil) 00:19:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 00:19:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x387, &(0x7f00000002c0), &(0x7f0000ff9000/0x1000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7081, &(0x7f0000000180)={0x0, 0x4c32, 0x4, 0x3, 0x22}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0xe492) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3734) r6 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) dup3(r3, r1, 0x0) 00:19:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) 00:19:10 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018008102e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc000900b800409925000000160012400a00fe8000000000000005000600020003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d021f003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3081ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x7}, 0x0) [ 1150.496190][ T116] usb 2-1: new high-speed USB device number 31 using dummy_hcd 00:19:10 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018008102e00f80ecdb4cb904021d65ef0b007c05e87c55a1bc000900b800409925000000160012400a00fe8000000000000005000600020003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d021f003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3081ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x7}, 0x0) [ 1150.934434][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.945614][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.955776][ T116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.968888][ T116] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1150.978275][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x387, &(0x7f00000002c0), &(0x7f0000ff9000/0x1000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7081, &(0x7f0000000180)={0x0, 0x4c32, 0x4, 0x3, 0x22}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0xe492) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3734) r6 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa0 [ 1151.202945][T12824] dump_stack_lvl+0x1ff/0x28e [ 1151.203020][T12824] dump_stack+0x25/0x28 [ 1151.203076][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1151.203142][T12824] ? __perf_event_task_sched_out+0x37ec/0x38a0 [ 1151.249718][T12824] ? psi_group_change+0x10e2/0x1620 [ 1151.255039][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1151.260190][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1151.266048][T12824] ? should_fail+0x75/0x9c0 [ 1151.270604][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1151.275783][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1151.282092][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1151.288205][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1151.293358][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1151.299206][T12824] __msan_chain_origin+0xbf/0x140 [ 1151.304268][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.309433][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.314408][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1151.319305][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.323866][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1151.329026][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1151.335311][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1151.340463][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1151.346748][T12824] ? fput+0x82/0x320 [ 1151.350776][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.357320][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.362051][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.368428][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.373499][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.378393][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.382942][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.389313][T12824] RIP: 0023:0xf6ecc549 [ 1151.393396][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1151.413037][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1151.421480][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1151.429473][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1151.437461][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1151.445446][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1151.453430][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1151.461432][T12824] [ 1151.467018][T12824] Uninit was stored to memory at: [ 1151.472240][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.477393][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.482490][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.487041][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.491889][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.498264][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.503468][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.508388][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.513071][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.519452][T12824] [ 1151.521902][T12824] Uninit was stored to memory at: [ 1151.526992][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.532265][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.537245][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.541926][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.546657][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.553153][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.558227][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.563244][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.567797][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.574307][T12824] [ 1151.576646][T12824] Uninit was stored to memory at: [ 1151.581744][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.587014][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.592111][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.596663][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.601393][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.607900][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.613071][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.617983][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.622666][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.629054][T12824] [ 1151.631376][T12824] Uninit was stored to memory at: [ 1151.636573][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.641730][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.646810][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.651357][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.656212][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.662689][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.667784][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.672830][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.677373][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.683886][T12824] [ 1151.686216][T12824] Uninit was stored to memory at: [ 1151.691295][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.696573][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.701556][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.706223][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.710953][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.717461][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.722638][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.727534][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.732204][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.738593][T12824] [ 1151.740924][T12824] Uninit was stored to memory at: [ 1151.746117][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.751269][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.756375][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.760927][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.765779][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.772264][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.777346][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.782365][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.786916][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.793405][T12824] [ 1151.795734][T12824] Uninit was stored to memory at: [ 1151.800820][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1151.806086][T12824] get_compat_msghdr+0x108/0x2c0 [ 1151.811074][T12824] do_recvmmsg+0xd77/0x2120 [ 1151.815729][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1151.820460][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1151.826966][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1151.832138][T12824] do_fast_syscall_32+0x34/0x70 [ 1151.837033][T12824] do_SYSENTER_32+0x1b/0x20 [ 1151.841581][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1151.848094][T12824] [ 1151.850444][T12824] Local variable msg_sys created at: [ 1151.855875][T12824] do_recvmmsg+0xbb/0x2120 [ 1151.860335][T12824] __sys_recvmmsg+0x51c/0x6f0 00:19:12 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x31, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x16}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8}]}, 0x50}}, 0x0) [ 1152.163348][T12835] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) fallocate(r0, 0x0, 0x0, 0x0) [ 1152.850109][ T116] wacom 0003:056A:00C4.001D: unknown main item tag 0x0 [ 1152.874924][ T116] wacom 0003:056A:00C4.001D: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 1152.902391][ T116] usb 2-1: USB disconnect, device number 31 00:19:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05c40000000000000109022400010000000009040000090300000009210000000122090009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000002340)={0x0, 0x22, 0x9, {[@main, @local=@item_012={0x2, 0x2, 0x0, "a1f6"}, @main=@item_4={0x3, 0x0, 0x8, "0c776a89"}]}}, 0x0}, 0x0) 00:19:13 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x387, &(0x7f00000002c0), &(0x7f0000ff9000/0x1000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7081, &(0x7f0000000180)={0x0, 0x4c32, 0x4, 0x3, 0x22}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0xe492) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3734) r6 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa0 [ 1153.884001][T12824] dump_stack_lvl+0x1ff/0x28e [ 1153.888731][T12824] dump_stack+0x25/0x28 [ 1153.892921][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1153.898693][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1153.904550][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1153.909696][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1153.915550][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1153.921135][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1153.926285][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1153.932145][T12824] ? should_fail+0x75/0x9c0 [ 1153.936684][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1153.941874][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1153.948153][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1153.954264][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1153.959423][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1153.965299][T12824] __msan_chain_origin+0xbf/0x140 [ 1153.970383][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1153.975565][T12824] get_compat_msghdr+0x108/0x2c0 [ 1153.980561][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1153.985560][T12824] do_recvmmsg+0xd77/0x2120 [ 1153.990133][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1153.995308][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1154.001602][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1154.006757][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1154.013053][T12824] ? fput+0x82/0x320 [ 1154.016995][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.023552][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.028726][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.035112][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.040198][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.045108][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.049661][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.056043][T12824] RIP: 0023:0xf6ecc549 [ 1154.060130][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1154.079789][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1154.088248][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1154.096260][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1154.104264][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.112266][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1154.120266][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.128284][T12824] [ 1154.135079][T12824] Uninit was stored to memory at: [ 1154.140200][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.145822][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.150814][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.155480][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.160352][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.166846][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.172015][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.176919][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.181468][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.187934][T12824] [ 1154.190268][T12824] Uninit was stored to memory at: [ 1154.195431][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.200584][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.205640][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.210191][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.214999][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.221374][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.226536][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.231439][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.236062][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.242617][T12824] [ 1154.244948][T12824] Uninit was stored to memory at: [ 1154.250113][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.255344][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.260324][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.264953][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.269676][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.276157][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.281254][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.286263][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.290816][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.297284][T12824] [ 1154.299619][T12824] Uninit was stored to memory at: [ 1154.304782][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.309931][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.314986][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.319535][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.324608][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.330986][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.336132][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.341029][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.345661][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.352119][T12824] [ 1154.354449][T12824] Uninit was stored to memory at: [ 1154.359526][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.364753][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.369723][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.374698][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.379417][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.385869][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.390939][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.395911][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.400458][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.406915][T12824] [ 1154.409243][T12824] Uninit was stored to memory at: [ 1154.414403][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.419552][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.424599][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.429149][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.434031][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.440403][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.445552][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.450452][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.455074][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.461454][T12824] [ 1154.463858][T12824] Uninit was stored to memory at: [ 1154.468935][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1154.474341][T12824] get_compat_msghdr+0x108/0x2c0 [ 1154.479315][T12824] do_recvmmsg+0xd77/0x2120 [ 1154.483940][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.488662][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1154.495109][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1154.500185][T12824] do_fast_syscall_32+0x34/0x70 [ 1154.505165][T12824] do_SYSENTER_32+0x1b/0x20 [ 1154.509718][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1154.516284][T12824] [ 1154.518614][T12824] Local variable msg_sys created at: [ 1154.523982][T12824] do_recvmmsg+0xbb/0x2120 [ 1154.528440][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1154.622178][ T5220] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1155.013558][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.024793][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.034804][ T5220] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1155.047956][ T5220] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1155.057568][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.238238][ T5220] usb 2-1: config 0 descriptor?? [ 1155.531537][T12824] not chained 140000 origins [ 1155.536766][T12824] CPU: 1 PID: 12824 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1155.545659][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.555739][T12824] Call Trace: [ 1155.559035][T12824] [ 1155.562151][T12824] dump_stack_lvl+0x1ff/0x28e [ 1155.566883][T12824] dump_stack+0x25/0x28 [ 1155.571075][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1155.576839][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1155.582793][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.587948][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1155.593809][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1155.599400][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.604558][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1155.610422][T12824] ? should_fail+0x75/0x9c0 [ 1155.614967][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.620122][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1155.626412][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1155.632546][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.637701][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1155.643641][T12824] __msan_chain_origin+0xbf/0x140 [ 1155.648711][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1155.653876][T12824] get_compat_msghdr+0x108/0x2c0 [ 1155.658861][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1155.663763][T12824] do_recvmmsg+0xd77/0x2120 [ 1155.668516][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.673684][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1155.679975][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1155.685129][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1155.691422][T12824] ? fput+0x82/0x320 [ 1155.695361][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1155.701922][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1155.706663][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1155.713051][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1155.718131][T12824] do_fast_syscall_32+0x34/0x70 [ 1155.723034][T12824] do_SYSENTER_32+0x1b/0x20 [ 1155.728107][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.734485][T12824] RIP: 0023:0xf6ecc549 [ 1155.738602][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1155.758275][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.766728][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1155.774727][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.782722][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.791063][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1155.799062][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.807075][T12824] [ 1155.814810][T12824] Uninit was stored to memory at: [ 1155.820699][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1155.825976][T12824] get_compat_msghdr+0x108/0x2c0 [ 1155.830962][T12824] do_recvmmsg+0xd77/0x2120 [ 1155.835620][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1155.840368][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1155.840630][ T5220] wacom 0003:056A:00C4.001E: unknown main item tag 0x0 [ 1155.846885][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1155.846946][T12824] do_fast_syscall_32+0x34/0x70 [ 1155.846999][T12824] do_SYSENTER_32+0x1b/0x20 [ 1155.868528][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.875042][T12824] [ 1155.877373][T12824] Uninit was stored to memory at: [ 1155.882680][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1155.887833][T12824] get_compat_msghdr+0x108/0x2c0 [ 1155.892932][T12824] do_recvmmsg+0xd77/0x2120 [ 1155.897490][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1155.902435][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1155.908820][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1155.914079][T12824] do_fast_syscall_32+0x34/0x70 [ 1155.918993][T12824] do_SYSENTER_32+0x1b/0x20 [ 1155.923727][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.930115][T12824] [ 1155.932625][T12824] Uninit was stored to memory at: [ 1155.937711][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1155.943054][T12824] get_compat_msghdr+0x108/0x2c0 [ 1155.948036][T12824] do_recvmmsg+0xd77/0x2120 [ 1155.952787][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1155.957540][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1155.964101][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1155.969180][T12824] do_fast_syscall_32+0x34/0x70 [ 1155.974358][T12824] do_SYSENTER_32+0x1b/0x20 [ 1155.977793][ T5220] wacom 0003:056A:00C4.001E: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 1155.978913][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.996525][T12824] [ 1155.998863][T12824] Uninit was stored to memory at: [ 1156.004046][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.009196][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.014350][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.018921][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.023853][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.030235][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.035498][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.040401][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.045152][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.051567][T12824] [ 1156.054094][T12824] Uninit was stored to memory at: [ 1156.059176][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.064512][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.069581][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.074321][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.079060][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.083101][ T5220] usb 2-1: USB disconnect, device number 32 [ 1156.085619][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.096506][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.101413][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.106142][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.112619][T12824] [ 1156.114951][T12824] Uninit was stored to memory at: [ 1156.120028][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.125363][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.130346][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.135175][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.139978][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.146541][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.151621][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.156723][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.161682][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.168299][T12824] [ 1156.170631][T12824] Uninit was stored to memory at: [ 1156.175914][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.181068][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.186223][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.190777][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.195705][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.202210][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.207292][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.212446][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.217015][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.223597][T12824] [ 1156.225932][T12824] Local variable msg_sys created at: [ 1156.231223][T12824] do_recvmmsg+0xbb/0x2120 [ 1156.235919][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.656976][T12824] not chained 150000 origins [ 1156.661622][T12824] CPU: 1 PID: 12824 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1156.670430][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.680528][T12824] Call Trace: [ 1156.683832][T12824] [ 1156.686785][T12824] dump_stack_lvl+0x1ff/0x28e [ 1156.691534][T12824] dump_stack+0x25/0x28 [ 1156.695739][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1156.701504][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1156.707357][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.712511][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1156.718453][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1156.724037][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.729187][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1156.735052][T12824] ? should_fail+0x75/0x9c0 [ 1156.739946][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.745099][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1156.751386][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1156.757501][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.762655][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1156.768521][T12824] __msan_chain_origin+0xbf/0x140 [ 1156.773591][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.778850][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.783826][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1156.788737][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.793300][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.798550][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1156.804834][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1156.809990][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1156.816277][T12824] ? fput+0x82/0x320 [ 1156.820209][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.826755][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.831492][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.837872][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.842944][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.847836][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.852385][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.858758][T12824] RIP: 0023:0xf6ecc549 [ 1156.862846][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1156.882498][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1156.890946][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1156.898941][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.906931][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1156.914921][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1156.922911][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.931005][T12824] [ 1156.937438][T12824] Uninit was stored to memory at: [ 1156.943303][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1156.948458][T12824] get_compat_msghdr+0x108/0x2c0 [ 1156.953556][T12824] do_recvmmsg+0xd77/0x2120 [ 1156.958111][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1156.962975][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1156.969364][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1156.974587][T12824] do_fast_syscall_32+0x34/0x70 [ 1156.979668][T12824] do_SYSENTER_32+0x1b/0x20 [ 1156.984373][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.990767][T12824] [ 1156.993317][T12824] Uninit was stored to memory at: [ 1156.998405][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.003691][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.008676][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.013348][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.018075][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.024580][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.029680][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.034712][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.039267][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.045784][T12824] [ 1157.048125][T12824] Uninit was stored to memory at: [ 1157.053304][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.058455][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.063555][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.068106][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.072951][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.079331][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.084603][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.089513][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.094257][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.100665][T12824] [ 1157.103177][T12824] Uninit was stored to memory at: [ 1157.108257][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.113590][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.118586][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.123307][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.128029][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.134594][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.139688][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.144816][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.149371][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.155998][T12824] [ 1157.158333][T12824] Uninit was stored to memory at: [ 1157.163604][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.168781][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.173959][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.178521][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.183434][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.189806][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.195008][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.199911][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.204631][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.211024][T12824] [ 1157.213537][T12824] Uninit was stored to memory at: [ 1157.218626][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.223884][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.228860][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.233625][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.238348][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.244841][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.249910][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.254932][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.259484][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.266030][T12824] [ 1157.268354][T12824] Uninit was stored to memory at: [ 1157.273525][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.278676][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.283829][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.288380][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.293277][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.299664][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.304905][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.309797][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.314451][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.320832][T12824] [ 1157.323342][T12824] Local variable msg_sys created at: [ 1157.328622][T12824] do_recvmmsg+0xbb/0x2120 [ 1157.333232][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.555429][T12824] not chained 160000 origins [ 1157.560063][T12824] CPU: 0 PID: 12824 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1157.568846][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.578918][T12824] Call Trace: [ 1157.582202][T12824] [ 1157.585139][T12824] dump_stack_lvl+0x1ff/0x28e [ 1157.589844][T12824] dump_stack+0x25/0x28 [ 1157.594017][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1157.599799][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1157.605655][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.610804][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1157.616642][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1157.622228][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.627390][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1157.633226][T12824] ? should_fail+0x75/0x9c0 [ 1157.637764][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.642918][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1157.649200][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1157.655300][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.660454][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1157.666284][T12824] __msan_chain_origin+0xbf/0x140 [ 1157.671347][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.676498][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.681507][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1157.686403][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.690975][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.696113][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1157.702378][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1157.707538][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1157.713817][T12824] ? fput+0x82/0x320 [ 1157.717730][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.724261][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.728988][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.735359][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.740406][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.745278][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.749820][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.756200][T12824] RIP: 0023:0xf6ecc549 [ 1157.760357][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1157.779980][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1157.788674][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1157.796674][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.804664][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1157.812639][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1157.820624][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.828613][T12824] [ 1157.834529][T12824] Uninit was stored to memory at: [ 1157.839620][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.845454][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.850433][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.855072][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.859812][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.866275][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.871356][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.876402][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.880943][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.887403][T12824] [ 1157.889729][T12824] Uninit was stored to memory at: [ 1157.894944][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.900084][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.905138][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.909714][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.914513][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.920880][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.926074][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.930965][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.935603][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.942054][T12824] [ 1157.944377][T12824] Uninit was stored to memory at: [ 1157.949450][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1157.955132][T12824] get_compat_msghdr+0x108/0x2c0 [ 1157.960115][T12824] do_recvmmsg+0xd77/0x2120 [ 1157.964811][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1157.969535][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1157.976010][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1157.981089][T12824] do_fast_syscall_32+0x34/0x70 [ 1157.986197][T12824] do_SYSENTER_32+0x1b/0x20 [ 1157.990758][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.997481][T12824] [ 1158.000013][T12824] Uninit was stored to memory at: [ 1158.005233][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.010375][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.015486][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.020029][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.024832][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.031199][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.036396][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.041290][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.045923][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.052462][T12824] [ 1158.054789][T12824] Uninit was stored to memory at: [ 1158.059865][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.065110][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.070079][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.074778][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.079497][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.086913][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.092063][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.096962][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.101524][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.108000][T12824] [ 1158.110325][T12824] Uninit was stored to memory at: [ 1158.115644][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.120851][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.126012][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.130578][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.135431][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.141902][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.146983][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.152018][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.156584][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.163193][T12824] [ 1158.165527][T12824] Uninit was stored to memory at: [ 1158.170626][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.175930][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.180909][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.185589][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.190309][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.196778][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.201935][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.206834][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.211353][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.217871][T12824] [ 1158.220200][T12824] Local variable msg_sys created at: [ 1158.225628][T12824] do_recvmmsg+0xbb/0x2120 [ 1158.230086][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.398215][T12824] not chained 170000 origins [ 1158.402959][T12824] CPU: 0 PID: 12824 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1158.411751][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.421836][T12824] Call Trace: [ 1158.425125][T12824] [ 1158.428060][T12824] dump_stack_lvl+0x1ff/0x28e [ 1158.432771][T12824] dump_stack+0x25/0x28 [ 1158.436969][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1158.442728][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1158.448586][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.453733][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1158.459607][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1158.465175][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.470332][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1158.476187][T12824] ? should_fail+0x75/0x9c0 [ 1158.480746][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.485891][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1158.492158][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1158.498267][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.503397][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1158.509241][T12824] __msan_chain_origin+0xbf/0x140 [ 1158.514285][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.519460][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.524412][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1158.529296][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.533841][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.539008][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1158.545275][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1158.550425][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1158.556689][T12824] ? fput+0x82/0x320 [ 1158.560627][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.567173][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.571909][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.578284][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.583341][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.588230][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.592755][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.599131][T12824] RIP: 0023:0xf6ecc549 [ 1158.603203][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1158.622848][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1158.631292][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1158.639268][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.647244][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.655239][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1158.663228][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.671231][T12824] [ 1158.676731][T12824] Uninit was stored to memory at: [ 1158.682149][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.687302][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.692364][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.696906][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.701653][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.708131][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.713286][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.718202][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.722882][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.729252][T12824] [ 1158.731578][T12824] Uninit was stored to memory at: [ 1158.736791][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.742019][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.746995][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.751538][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.756382][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.762850][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.767914][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.772926][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.777468][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.783923][T12824] [ 1158.786246][T12824] Uninit was stored to memory at: [ 1158.791314][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.796560][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.801524][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.806196][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.810927][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.817382][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.822530][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.827420][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.832096][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.838468][T12824] [ 1158.840778][T12824] Uninit was stored to memory at: [ 1158.845993][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.851128][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.856196][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.860733][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.865572][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.872015][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.877078][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.882089][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.886637][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.893088][T12824] [ 1158.895409][T12824] Uninit was stored to memory at: [ 1158.900462][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.905723][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.910688][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.915317][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.920030][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.926516][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.931579][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.936554][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.941112][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1158.947617][T12824] [ 1158.949943][T12824] Uninit was stored to memory at: [ 1158.955135][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1158.960270][T12824] get_compat_msghdr+0x108/0x2c0 [ 1158.965357][T12824] do_recvmmsg+0xd77/0x2120 [ 1158.969896][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1158.974724][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1158.981088][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1158.986271][T12824] do_fast_syscall_32+0x34/0x70 [ 1158.991165][T12824] do_SYSENTER_32+0x1b/0x20 [ 1158.995853][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.002305][T12824] [ 1159.004628][T12824] Uninit was stored to memory at: [ 1159.009699][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.014974][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.019935][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.024556][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.029278][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.035766][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.040841][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.045824][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.050409][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.056915][T12824] [ 1159.059239][T12824] Local variable msg_sys created at: [ 1159.064613][T12824] do_recvmmsg+0xbb/0x2120 [ 1159.069081][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.280780][T12824] not chained 180000 origins [ 1159.285606][T12824] CPU: 0 PID: 12824 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1159.294414][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.304488][T12824] Call Trace: [ 1159.307778][T12824] [ 1159.311225][T12824] dump_stack_lvl+0x1ff/0x28e [ 1159.315932][T12824] dump_stack+0x25/0x28 [ 1159.320107][T12824] kmsan_internal_chain_origin+0x78/0x110 [ 1159.325849][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1159.331693][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.336837][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1159.342693][T12824] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1159.348280][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.353415][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1159.359247][T12824] ? should_fail+0x75/0x9c0 [ 1159.363766][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.368899][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1159.375163][T12824] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1159.381258][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.386394][T12824] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1159.392260][T12824] __msan_chain_origin+0xbf/0x140 [ 1159.397325][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.402477][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.407540][T12824] ? __sys_recvmmsg+0x51c/0x6f0 [ 1159.412419][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.416958][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.422101][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1159.428383][T12824] ? kmsan_get_metadata+0x33/0x220 [ 1159.433522][T12824] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1159.439785][T12824] ? fput+0x82/0x320 [ 1159.443703][T12824] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.450253][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.454987][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.461375][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.466452][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.471329][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.475857][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.482217][T12824] RIP: 0023:0xf6ecc549 [ 1159.486303][T12824] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1159.505948][T12824] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1159.514380][T12824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1159.522362][T12824] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.530349][T12824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1159.538323][T12824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1159.546299][T12824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1159.554293][T12824] [ 1159.560051][T12824] Uninit was stored to memory at: [ 1159.565486][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.570649][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.575721][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.580278][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.585094][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.591474][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.596640][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.601540][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.606186][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.612717][T12824] [ 1159.615048][T12824] Uninit was stored to memory at: [ 1159.620115][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.625352][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.630326][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.635009][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.639728][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.646228][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.651303][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.656335][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.660881][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.667394][T12824] [ 1159.669725][T12824] Uninit was stored to memory at: [ 1159.674956][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.680103][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.685182][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.689730][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.694582][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.700957][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.706086][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.710978][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.715687][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.722173][T12824] [ 1159.724595][T12824] Uninit was stored to memory at: [ 1159.729659][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.735059][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.740042][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.744774][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.749503][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.756012][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.761089][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.766102][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.770647][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.777167][T12824] [ 1159.779500][T12824] Uninit was stored to memory at: [ 1159.784730][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.789874][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.794998][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.799550][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.804405][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.810781][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.816411][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.821310][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.826013][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.832482][T12824] [ 1159.835416][T12824] Uninit was stored to memory at: [ 1159.840469][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.845748][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.850724][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.855367][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.860087][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.866589][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.871665][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.876660][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.881203][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.887701][T12824] [ 1159.890029][T12824] Uninit was stored to memory at: [ 1159.895273][T12824] __get_compat_msghdr+0x6e1/0x9d0 [ 1159.900423][T12824] get_compat_msghdr+0x108/0x2c0 [ 1159.905624][T12824] do_recvmmsg+0xd77/0x2120 [ 1159.910175][T12824] __sys_recvmmsg+0x51c/0x6f0 [ 1159.915054][T12824] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1159.921424][T12824] __do_fast_syscall_32+0x96/0xf0 [ 1159.926583][T12824] do_fast_syscall_32+0x34/0x70 [ 1159.931481][T12824] do_SYSENTER_32+0x1b/0x20 [ 1159.936158][T12824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1159.942620][T12824] [ 1159.944949][T12824] Local variable msg_sys created at: [ 1159.950231][T12824] do_recvmmsg+0xbb/0x2120 [ 1159.954816][T12824] __sys_recvmmsg+0x51c/0x6f0 00:19:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) 00:19:20 executing program 2: r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:19:20 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:20 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) 00:19:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x387, &(0x7f00000002c0), &(0x7f0000ff9000/0x1000)=nil, &(0x7f00005c0000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7081, &(0x7f0000000180)={0x0, 0x4c32, 0x4, 0x3, 0x22}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0xe492) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3734) r6 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:19:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) [ 1161.314037][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.325258][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.336286][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1161.349545][ T5724] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1161.358855][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x40afc}, 0x0) 00:19:21 executing program 5: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x20020480) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047455, &(0x7f0000000080)) [ 1161.443569][ T5724] usb 2-1: config 0 descriptor?? 00:19:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)='?', 0x1}], 0x1, 0x81806, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000080)='./file0\x00', 0x80) r3 = dup(r2) sendfile(r3, r0, 0x0, 0x24002da8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 1161.930368][ T5724] wacom 0003:056A:00C4.001F: unknown main item tag 0x0 [ 1161.990543][ T5724] wacom 0003:056A:00C4.001F: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 1162.075171][T12893] loop7: detected capacity change from 0 to 1036 [ 1162.180184][ T5724] usb 2-1: USB disconnect, device number 33 [ 1162.230761][T12877] not chained 190000 origins [ 1162.236017][T12877] CPU: 0 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1162.244828][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.254913][T12877] Call Trace: [ 1162.258206][T12877] [ 1162.261148][T12877] dump_stack_lvl+0x1ff/0x28e [ 1162.265879][T12877] dump_stack+0x25/0x28 [ 1162.270076][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1162.275842][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1162.281707][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.286878][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1162.292736][T12877] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1162.298336][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.303500][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1162.309364][T12877] ? should_fail+0x75/0x9c0 [ 1162.313921][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.319081][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1162.325376][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1162.331503][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.336667][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1162.342531][T12877] __msan_chain_origin+0xbf/0x140 [ 1162.347604][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.352778][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.357769][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1162.362685][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.367260][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.372429][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1162.378727][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1162.383893][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1162.390187][T12877] ? fput+0x82/0x320 [ 1162.394131][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.400695][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.405442][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.411858][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.416936][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.421836][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.426387][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.432770][T12877] RIP: 0023:0xf6ecc549 [ 1162.436865][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1162.456554][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1162.465104][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1162.473106][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.481105][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.489106][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1162.497108][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.505123][T12877] [ 1162.513429][T12877] Uninit was stored to memory at: [ 1162.518531][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.524801][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.529781][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.534438][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.539169][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.545638][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.550715][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.555712][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.560264][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.566829][T12877] [ 1162.569176][T12877] Uninit was stored to memory at: [ 1162.574384][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.579536][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.584617][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.589175][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.594006][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.600383][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.605557][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.610459][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.615106][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.621485][T12877] [ 1162.623906][T12877] Uninit was stored to memory at: [ 1162.628988][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.634223][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.639196][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.643836][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.648562][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.655021][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.660093][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.665082][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.669635][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.676120][T12877] [ 1162.678453][T12877] Uninit was stored to memory at: [ 1162.683637][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.688790][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.693869][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.698422][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.703239][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.709616][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.714782][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.719688][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.724382][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.730765][T12877] [ 1162.733245][T12877] Uninit was stored to memory at: [ 1162.738329][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.743626][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.748606][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.753301][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.758024][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.764543][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.769620][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.774691][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.779254][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.785759][T12877] [ 1162.788100][T12877] Uninit was stored to memory at: [ 1162.793339][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.798487][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.803623][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.808187][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.813007][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.819385][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.824612][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.829512][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.834211][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.840601][T12877] [ 1162.843110][T12877] Uninit was stored to memory at: [ 1162.848193][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1162.853482][T12877] get_compat_msghdr+0x108/0x2c0 [ 1162.858455][T12877] do_recvmmsg+0xd77/0x2120 [ 1162.863141][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1162.867869][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1162.874381][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1162.879452][T12877] do_fast_syscall_32+0x34/0x70 [ 1162.884561][T12877] do_SYSENTER_32+0x1b/0x20 [ 1162.889110][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1162.895623][T12877] [ 1162.897958][T12877] Local variable msg_sys created at: [ 1162.903408][T12877] do_recvmmsg+0xbb/0x2120 [ 1162.907900][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1163.556021][T12877] not chained 200000 origins [ 1163.560774][T12877] CPU: 0 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1163.569578][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.579659][T12877] Call Trace: [ 1163.583042][T12877] [ 1163.585991][T12877] dump_stack_lvl+0x1ff/0x28e [ 1163.590827][T12877] dump_stack+0x25/0x28 [ 1163.595031][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1163.600895][T12877] ? __perf_event_task_sched_out+0x37ec/0x38a0 [ 1163.607114][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.612289][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.617453][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.622615][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1163.628483][T12877] ? should_fail+0x75/0x9c0 [ 1163.633032][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.638192][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1163.644490][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1163.650610][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.655779][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1163.661635][T12877] __msan_chain_origin+0xbf/0x140 [ 1163.666706][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1163.671877][T12877] get_compat_msghdr+0x108/0x2c0 [ 1163.676858][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1163.681765][T12877] do_recvmmsg+0xd77/0x2120 [ 1163.686333][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.691505][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1163.697795][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1163.702956][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1163.709247][T12877] ? fput+0x82/0x320 [ 1163.713191][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1163.719746][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1163.724487][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1163.730890][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1163.735968][T12877] do_fast_syscall_32+0x34/0x70 [ 1163.740864][T12877] do_SYSENTER_32+0x1b/0x20 [ 1163.745421][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.751808][T12877] RIP: 0023:0xf6ecc549 [ 1163.755907][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1163.775555][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1163.784007][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1163.792006][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1163.800002][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.808000][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1163.815991][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.823999][T12877] [ 1163.829623][T12877] Uninit was stored to memory at: [ 1163.835126][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1163.840278][T12877] get_compat_msghdr+0x108/0x2c0 [ 1163.845357][T12877] do_recvmmsg+0xd77/0x2120 [ 1163.849906][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1163.854720][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1163.861089][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1163.866251][T12877] do_fast_syscall_32+0x34/0x70 [ 1163.871149][T12877] do_SYSENTER_32+0x1b/0x20 [ 1163.875783][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.882230][T12877] [ 1163.884565][T12877] Uninit was stored to memory at: [ 1163.889645][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1163.894881][T12877] get_compat_msghdr+0x108/0x2c0 [ 1163.899877][T12877] do_recvmmsg+0xd77/0x2120 [ 1163.904521][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1163.909241][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1163.915708][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1163.920795][T12877] do_fast_syscall_32+0x34/0x70 [ 1163.925788][T12877] do_SYSENTER_32+0x1b/0x20 [ 1163.930339][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.936815][T12877] [ 1163.939149][T12877] Uninit was stored to memory at: [ 1163.944320][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1163.949465][T12877] get_compat_msghdr+0x108/0x2c0 [ 1163.954581][T12877] do_recvmmsg+0xd77/0x2120 [ 1163.959125][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1163.963934][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1163.970309][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1163.975534][T12877] do_fast_syscall_32+0x34/0x70 [ 1163.980431][T12877] do_SYSENTER_32+0x1b/0x20 [ 1163.985129][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1163.991512][T12877] [ 1163.993981][T12877] Uninit was stored to memory at: [ 1163.999063][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.004358][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.009336][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.014026][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.018755][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.025274][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.030352][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.035403][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.039953][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.046490][T12877] [ 1164.048830][T12877] Uninit was stored to memory at: [ 1164.054133][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.059291][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.064426][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.068983][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.073851][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.080229][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.085457][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.090357][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.095031][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.101413][T12877] [ 1164.103867][T12877] Uninit was stored to memory at: [ 1164.108947][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.114182][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.119159][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.123859][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.128586][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.135136][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.140224][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.145309][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.149861][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.156411][T12877] [ 1164.158869][T12877] Uninit was stored to memory at: [ 1164.164126][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.169278][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.174424][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.178976][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.183856][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.190238][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.195478][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.200377][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.205081][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.211461][T12877] [ 1164.213935][T12877] Local variable msg_sys created at: [ 1164.219227][T12877] do_recvmmsg+0xbb/0x2120 [ 1164.223847][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.481670][T12877] not chained 210000 origins [ 1164.486413][T12877] CPU: 0 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1164.495216][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.505385][T12877] Call Trace: [ 1164.508681][T12877] [ 1164.511669][T12877] dump_stack_lvl+0x1ff/0x28e [ 1164.516400][T12877] dump_stack+0x25/0x28 [ 1164.520691][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1164.526453][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1164.532319][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.537475][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1164.543339][T12877] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1164.548930][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.554085][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1164.559943][T12877] ? should_fail+0x75/0x9c0 [ 1164.564487][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.569645][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1164.575937][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1164.582056][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.587211][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1164.593074][T12877] __msan_chain_origin+0xbf/0x140 [ 1164.598153][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.603325][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.608313][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1164.613215][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.617788][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.622956][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1164.629251][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1164.634414][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1164.640705][T12877] ? fput+0x82/0x320 [ 1164.644642][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.651191][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.655928][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.662317][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.667395][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.672316][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.676870][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.683251][T12877] RIP: 0023:0xf6ecc549 [ 1164.687346][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1164.706997][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1164.715454][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1164.723463][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.731460][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1164.739456][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1164.747451][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.755477][T12877] [ 1164.763428][T12877] Uninit was stored to memory at: [ 1164.768526][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.774630][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.779620][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.784268][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.788997][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.795478][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.800564][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.805557][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.810454][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.816936][T12877] [ 1164.819290][T12877] Uninit was stored to memory at: [ 1164.824470][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.829621][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.834687][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.839238][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.844059][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.850436][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.855619][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.860520][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.865216][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.871597][T12877] [ 1164.874025][T12877] Uninit was stored to memory at: [ 1164.879185][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.884474][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.889450][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.894153][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.898901][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.905413][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.910832][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.915861][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.920409][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.926916][T12877] [ 1164.929249][T12877] Uninit was stored to memory at: [ 1164.934573][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.939721][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.944827][T12877] do_recvmmsg+0xd77/0x2120 [ 1164.949380][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1164.954256][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1164.960636][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1164.965872][T12877] do_fast_syscall_32+0x34/0x70 [ 1164.970786][T12877] do_SYSENTER_32+0x1b/0x20 [ 1164.975496][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1164.982026][T12877] [ 1164.984345][T12877] Uninit was stored to memory at: [ 1164.989399][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1164.994679][T12877] get_compat_msghdr+0x108/0x2c0 [ 1164.999654][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.004363][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.009091][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.015717][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.020802][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.025918][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.030471][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.036990][T12877] [ 1165.039316][T12877] Uninit was stored to memory at: [ 1165.044562][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.049719][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.054912][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.059476][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.064352][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.070723][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.075940][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.080840][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.085534][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.091998][T12877] [ 1165.094327][T12877] Uninit was stored to memory at: [ 1165.099381][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.104659][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.109637][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.114343][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.119070][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.125598][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.130672][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.135728][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.140284][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.146801][T12877] [ 1165.149134][T12877] Local variable msg_sys created at: [ 1165.154569][T12877] do_recvmmsg+0xbb/0x2120 [ 1165.159032][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.415484][T12877] not chained 220000 origins [ 1165.420129][T12877] CPU: 1 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1165.428927][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.439008][T12877] Call Trace: [ 1165.442300][T12877] [ 1165.445253][T12877] dump_stack_lvl+0x1ff/0x28e [ 1165.449984][T12877] dump_stack+0x25/0x28 [ 1165.454180][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1165.459945][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1165.465807][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.470943][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1165.476778][T12877] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1165.482347][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.487481][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1165.493336][T12877] ? should_fail+0x75/0x9c0 [ 1165.497868][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.503000][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1165.509265][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1165.515356][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.520485][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1165.526314][T12877] __msan_chain_origin+0xbf/0x140 [ 1165.531356][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.536506][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.541479][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1165.546359][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.550896][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.556036][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1165.562306][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1165.567456][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1165.573735][T12877] ? fput+0x82/0x320 [ 1165.577649][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.584174][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.588883][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.595238][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.600289][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.605161][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.609685][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.616042][T12877] RIP: 0023:0xf6ecc549 [ 1165.620112][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1165.639743][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1165.648371][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1165.656352][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1165.664327][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1165.672314][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1165.680293][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1165.688280][T12877] [ 1165.695644][T12877] Uninit was stored to memory at: [ 1165.700747][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.706792][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.711873][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.716427][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.721201][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.727705][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.732899][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.737806][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.742499][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.748882][T12877] [ 1165.751213][T12877] Uninit was stored to memory at: [ 1165.756364][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.761489][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.766590][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.771141][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.776029][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.782499][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.787572][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.792626][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.797193][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.803739][T12877] [ 1165.806091][T12877] Uninit was stored to memory at: [ 1165.811149][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.816464][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.821443][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.826166][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.830887][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.837370][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.842540][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.847438][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.852180][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.858566][T12877] [ 1165.860881][T12877] Uninit was stored to memory at: [ 1165.866085][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.871249][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.876392][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.880941][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.885762][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.892259][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.897340][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.902394][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.906943][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.913448][T12877] [ 1165.915778][T12877] Uninit was stored to memory at: [ 1165.920842][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.926154][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.931131][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.935846][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.940574][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1165.947112][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1165.952277][T12877] do_fast_syscall_32+0x34/0x70 [ 1165.957191][T12877] do_SYSENTER_32+0x1b/0x20 [ 1165.961716][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1165.968266][T12877] [ 1165.970584][T12877] Uninit was stored to memory at: [ 1165.975781][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1165.980951][T12877] get_compat_msghdr+0x108/0x2c0 [ 1165.986106][T12877] do_recvmmsg+0xd77/0x2120 [ 1165.990654][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1165.995517][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.002006][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.007087][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.012117][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.016666][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.023177][T12877] [ 1166.025504][T12877] Uninit was stored to memory at: [ 1166.030561][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.035873][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.040848][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.045532][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.050259][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.056773][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.061939][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.066835][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.071377][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.077873][T12877] [ 1166.080203][T12877] Local variable msg_sys created at: [ 1166.085589][T12877] do_recvmmsg+0xbb/0x2120 [ 1166.090047][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.291307][T12877] not chained 230000 origins [ 1166.296086][T12877] CPU: 1 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1166.304887][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.314951][T12877] Call Trace: [ 1166.318226][T12877] [ 1166.321152][T12877] dump_stack_lvl+0x1ff/0x28e [ 1166.325891][T12877] dump_stack+0x25/0x28 [ 1166.330072][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1166.335812][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1166.341668][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.346800][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1166.352633][T12877] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1166.358200][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.363339][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1166.369171][T12877] ? should_fail+0x75/0x9c0 [ 1166.373691][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.378821][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1166.385086][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1166.391197][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.396340][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1166.402172][T12877] __msan_chain_origin+0xbf/0x140 [ 1166.407217][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.412619][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.417571][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1166.422443][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.426981][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.432119][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1166.438387][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1166.443519][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1166.449785][T12877] ? fput+0x82/0x320 [ 1166.453699][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.460225][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.464958][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.471315][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.476367][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.481238][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.485778][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.492150][T12877] RIP: 0023:0xf6ecc549 [ 1166.496219][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1166.515843][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1166.524285][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1166.532262][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1166.540236][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.548223][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1166.556196][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1166.564182][T12877] [ 1166.570501][T12877] Uninit was stored to memory at: [ 1166.576059][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.581211][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.586310][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.590858][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.595685][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.602180][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.607258][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.612334][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.616887][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.623386][T12877] [ 1166.625719][T12877] Uninit was stored to memory at: [ 1166.630802][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.636066][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.641040][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.645747][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.650474][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.657022][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.662179][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.667076][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.671627][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.678248][T12877] [ 1166.680582][T12877] Uninit was stored to memory at: [ 1166.685825][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.690976][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.696187][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.700735][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.705557][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.712113][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.717207][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.722418][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.726974][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.733740][T12877] [ 1166.736068][T12877] Uninit was stored to memory at: [ 1166.741122][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.746437][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.751416][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.756127][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.760843][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.767320][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.772483][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.777384][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.782087][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.788520][T12877] [ 1166.790837][T12877] Uninit was stored to memory at: [ 1166.796060][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.801197][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.806329][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.810876][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.815700][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.822176][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.827247][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.832307][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.836846][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.843321][T12877] [ 1166.845647][T12877] Uninit was stored to memory at: [ 1166.850698][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.855993][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.860982][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.865615][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.870330][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.876805][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.881955][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.886844][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.891377][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.897857][T12877] [ 1166.900182][T12877] Uninit was stored to memory at: [ 1166.905351][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1166.910493][T12877] get_compat_msghdr+0x108/0x2c0 [ 1166.915624][T12877] do_recvmmsg+0xd77/0x2120 [ 1166.920166][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1166.925001][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1166.931366][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1166.936539][T12877] do_fast_syscall_32+0x34/0x70 [ 1166.941432][T12877] do_SYSENTER_32+0x1b/0x20 [ 1166.946125][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1166.952565][T12877] [ 1166.954890][T12877] Local variable msg_sys created at: [ 1166.960165][T12877] do_recvmmsg+0xbb/0x2120 [ 1166.964821][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.147126][T12877] not chained 240000 origins [ 1167.151887][T12877] CPU: 1 PID: 12877 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1167.160691][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.170777][T12877] Call Trace: [ 1167.174060][T12877] [ 1167.177004][T12877] dump_stack_lvl+0x1ff/0x28e [ 1167.181717][T12877] dump_stack+0x25/0x28 [ 1167.185902][T12877] kmsan_internal_chain_origin+0x78/0x110 [ 1167.191654][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1167.197559][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.202695][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1167.208534][T12877] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1167.214100][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.219230][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1167.225066][T12877] ? should_fail+0x75/0x9c0 [ 1167.229585][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.234720][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1167.240988][T12877] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1167.247079][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.252207][T12877] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1167.258034][T12877] __msan_chain_origin+0xbf/0x140 [ 1167.263078][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.268218][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.273172][T12877] ? __sys_recvmmsg+0x51c/0x6f0 [ 1167.278052][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.282628][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.287771][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1167.294040][T12877] ? kmsan_get_metadata+0x33/0x220 [ 1167.299170][T12877] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1167.305438][T12877] ? fput+0x82/0x320 [ 1167.309354][T12877] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.315879][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.320605][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.326961][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.332014][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.336891][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.341413][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.347764][T12877] RIP: 0023:0xf6ecc549 [ 1167.351842][T12877] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1167.371481][T12877] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1167.379906][T12877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1167.387901][T12877] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.395884][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.403859][T12877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1167.412109][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.420098][T12877] [ 1167.426457][T12877] Uninit was stored to memory at: [ 1167.431553][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.437219][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.442299][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.446851][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.451575][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.458074][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.463302][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.468207][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.472955][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.479357][T12877] [ 1167.481683][T12877] Uninit was stored to memory at: [ 1167.486955][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.492192][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.497163][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.501700][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.506577][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.513086][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.518155][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.523215][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.527760][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.534305][T12877] [ 1167.536637][T12877] Uninit was stored to memory at: [ 1167.541704][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.547019][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.552120][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.556668][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.561365][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.567913][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.573082][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.577977][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.582676][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.589055][T12877] [ 1167.591379][T12877] Uninit was stored to memory at: [ 1167.596584][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.601729][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.606841][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.611389][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.616239][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.622766][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.627842][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.632901][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.637451][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.643956][T12877] [ 1167.646288][T12877] Uninit was stored to memory at: [ 1167.651342][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.656598][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.661571][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.666285][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.671008][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.677558][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.682694][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.687570][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.692287][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.698670][T12877] [ 1167.700998][T12877] Uninit was stored to memory at: [ 1167.706204][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.711351][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.716445][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.720994][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.725895][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.732337][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.737388][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.742436][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.746981][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.753529][T12877] [ 1167.755858][T12877] Uninit was stored to memory at: [ 1167.760925][T12877] __get_compat_msghdr+0x6e1/0x9d0 [ 1167.766188][T12877] get_compat_msghdr+0x108/0x2c0 [ 1167.771161][T12877] do_recvmmsg+0xd77/0x2120 [ 1167.775884][T12877] __sys_recvmmsg+0x51c/0x6f0 [ 1167.780609][T12877] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1167.787152][T12877] __do_fast_syscall_32+0x96/0xf0 [ 1167.792324][T12877] do_fast_syscall_32+0x34/0x70 [ 1167.797222][T12877] do_SYSENTER_32+0x1b/0x20 [ 1167.801747][T12877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1167.808638][T12877] [ 1167.810968][T12877] Local variable msg_sys created at: [ 1167.816376][T12877] do_recvmmsg+0xbb/0x2120 [ 1167.820838][T12877] __sys_recvmmsg+0x51c/0x6f0 00:19:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) 00:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 00:19:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x40afc}, 0x0) 00:19:28 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 00:19:28 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) keyctl$dh_compute(0x10, &(0x7f0000000140), 0x0, 0x0, 0x0) 00:19:28 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="000100000314010027bd7000ffdbdf250900020025797a31000000000800410073697700140033"], 0x100}}, 0x0) [ 1168.125748][T12903] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1168.188289][ T24] audit: type=1800 audit(1168.243:232): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1177 res=0 errno=0 00:19:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd1cf, 0x101) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001200)=@urb_type_iso={0x2, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:19:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x40afc}, 0x0) 00:19:28 executing program 1: syncfs(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001300), &(0x7f0000001340)={[0x1a6]}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000280)={[{@nombcache}, {@minixdf}, {@nojournal_checksum}, {@grpid}]}) mount$bpf(0x0, &(0x7f0000000340)='.\x00', &(0x7f00000011c0), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0xc001, 0x0) 00:19:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) [ 1168.829480][T12918] loop1: detected capacity change from 0 to 512 [ 1168.870090][T12910] not chained 250000 origins [ 1168.874929][T12910] CPU: 1 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1168.883733][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.893817][T12910] Call Trace: [ 1168.897111][T12910] [ 1168.900057][T12910] dump_stack_lvl+0x1ff/0x28e [ 1168.904792][T12910] dump_stack+0x25/0x28 [ 1168.908993][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1168.914760][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1168.920621][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1168.925775][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1168.931638][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1168.937234][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1168.942420][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1168.948297][T12910] ? should_fail+0x75/0x9c0 [ 1168.952851][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1168.958014][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1168.964310][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1168.970439][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1168.975601][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1168.981469][T12910] __msan_chain_origin+0xbf/0x140 [ 1168.986542][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1168.991709][T12910] get_compat_msghdr+0x108/0x2c0 [ 1168.996703][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1169.001673][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.006240][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1169.012449][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1169.018319][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1169.023513][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1169.028689][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1169.033844][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1169.040147][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.046714][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.051456][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.057842][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.062916][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.067820][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.072364][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.078832][T12910] RIP: 0023:0xf6ecc549 [ 1169.082916][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1169.102560][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1169.111004][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1169.119001][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1169.126997][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1169.135001][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1169.142998][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.151014][T12910] [ 1169.157583][T12910] Uninit was stored to memory at: [ 1169.163754][T12910] __get_compat_msghdr+0x6e1/0x9d0 00:19:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x6c, 0x87400, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x40afc}, 0x0) [ 1169.168918][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.174054][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.178617][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.183480][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.189860][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.195082][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.199990][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.204687][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.211669][T12910] [ 1169.214142][T12910] Uninit was stored to memory at: [ 1169.219233][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.224519][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.229507][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.234191][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.238925][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.245489][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.250583][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.255672][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.260225][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.266779][T12910] [ 1169.269116][T12910] Uninit was stored to memory at: [ 1169.274293][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.279442][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.284529][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.289085][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.293922][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.300300][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.305560][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.310461][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.315135][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.321524][T12910] [ 1169.323978][T12910] Uninit was stored to memory at: [ 1169.329065][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.334341][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.339324][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.343998][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.348724][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.355230][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.360310][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.365317][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.369951][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.376444][T12910] [ 1169.378780][T12910] Uninit was stored to memory at: [ 1169.383956][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.389106][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.394188][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.398736][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.403572][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.409944][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.415127][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.420021][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.424672][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.431055][T12910] [ 1169.433487][T12910] Uninit was stored to memory at: [ 1169.438566][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.443821][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.448798][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.453455][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.458175][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1169.464647][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.469718][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.474726][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.479277][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.485758][T12910] [ 1169.488086][T12910] Uninit was stored to memory at: [ 1169.493247][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1169.498393][T12910] get_compat_msghdr+0x108/0x2c0 [ 1169.503479][T12910] do_recvmmsg+0xd77/0x2120 [ 1169.508203][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.513034][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 00:19:29 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x415, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x38}}, 0x0) [ 1169.519405][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1169.524579][T12910] do_fast_syscall_32+0x34/0x70 [ 1169.529479][T12910] do_SYSENTER_32+0x1b/0x20 [ 1169.534144][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1169.540520][T12910] [ 1169.542963][T12910] Local variable msg_sys created at: [ 1169.544251][T12918] EXT4-fs: failed to create workqueue [ 1169.548246][T12910] do_recvmmsg+0xbb/0x2120 [ 1169.548303][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1169.563851][T12918] EXT4-fs (loop1): mount failed [ 1169.945340][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1169.952044][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1169.958879][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1169.986605][T12929] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1170.237793][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.247450][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.255485][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.347225][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.357708][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.365991][T12929] geneve0 speed is unknown, defaulting to 1000 [ 1170.559191][T12910] not chained 260000 origins [ 1170.564198][T12910] CPU: 1 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1170.573040][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.584589][T12910] Call Trace: [ 1170.587889][T12910] [ 1170.590831][T12910] dump_stack_lvl+0x1ff/0x28e [ 1170.595569][T12910] dump_stack+0x25/0x28 [ 1170.599774][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1170.605569][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.611610][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.616767][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.622630][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1170.628219][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.633372][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.639228][T12910] ? should_fail+0x75/0x9c0 [ 1170.645295][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.650471][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1170.656796][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1170.662928][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.668095][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.673956][T12910] __msan_chain_origin+0xbf/0x140 [ 1170.679035][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1170.684220][T12910] get_compat_msghdr+0x108/0x2c0 [ 1170.689208][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1170.694111][T12910] do_recvmmsg+0xd77/0x2120 [ 1170.698662][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.704531][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1170.710409][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.715580][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1170.720740][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1170.725933][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1170.732230][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1170.739132][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1170.743873][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1170.750270][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1170.755352][T12910] do_fast_syscall_32+0x34/0x70 [ 1170.760254][T12910] do_SYSENTER_32+0x1b/0x20 [ 1170.764805][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1170.771385][T12910] RIP: 0023:0xf6ecc549 [ 1170.775774][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1170.795710][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1170.804206][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1170.812214][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.820222][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.828225][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1170.836222][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.844236][T12910] [ 1170.851233][T12910] Uninit was stored to memory at: [ 1170.857934][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1170.865238][T12910] get_compat_msghdr+0x108/0x2c0 [ 1170.870225][T12910] do_recvmmsg+0xd77/0x2120 [ 1170.875149][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1170.879876][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1170.886383][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1170.891459][T12910] do_fast_syscall_32+0x34/0x70 [ 1170.896475][T12910] do_SYSENTER_32+0x1b/0x20 [ 1170.901019][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1170.907537][T12910] [ 1170.909871][T12910] Uninit was stored to memory at: [ 1170.915054][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1170.920202][T12910] get_compat_msghdr+0x108/0x2c0 [ 1170.925292][T12910] do_recvmmsg+0xd77/0x2120 [ 1170.929840][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1170.934687][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1170.941064][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1170.946258][T12910] do_fast_syscall_32+0x34/0x70 [ 1170.951160][T12910] do_SYSENTER_32+0x1b/0x20 [ 1170.955852][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1170.962340][T12910] [ 1170.964678][T12910] Uninit was stored to memory at: [ 1170.969764][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1170.975085][T12910] get_compat_msghdr+0x108/0x2c0 [ 1170.980154][T12910] do_recvmmsg+0xd77/0x2120 [ 1170.984837][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1170.989565][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1170.996075][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.001154][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.006176][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.010730][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.017312][T12910] [ 1171.019832][T12910] Uninit was stored to memory at: [ 1171.025098][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.030253][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.035429][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.039986][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.044928][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.051304][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.056574][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.061476][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.066218][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.072705][T12910] [ 1171.075037][T12910] Uninit was stored to memory at: [ 1171.080121][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.085450][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.090441][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.095196][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.099926][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.106491][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.111571][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.116667][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.121227][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.127912][T12910] [ 1171.130245][T12910] Uninit was stored to memory at: [ 1171.135661][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.140817][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.145983][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.150540][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.155421][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.161953][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.167036][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.172118][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.176672][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.183247][T12910] [ 1171.185578][T12910] Uninit was stored to memory at: [ 1171.190660][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.195942][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.200929][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.205586][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.210312][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.216817][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.221980][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.226879][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.231973][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.238360][T12910] [ 1171.240715][T12910] Local variable msg_sys created at: [ 1171.246134][T12910] do_recvmmsg+0xbb/0x2120 [ 1171.250706][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.581420][T12910] not chained 270000 origins [ 1171.586285][T12910] CPU: 0 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1171.595094][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.605175][T12910] Call Trace: [ 1171.608991][T12910] [ 1171.611936][T12910] dump_stack_lvl+0x1ff/0x28e [ 1171.616670][T12910] dump_stack+0x25/0x28 [ 1171.620870][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1171.626640][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.632511][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.637667][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.643521][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1171.649106][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.654259][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.660113][T12910] ? should_fail+0x75/0x9c0 [ 1171.664652][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.669799][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1171.676092][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1171.682205][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.687362][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.693214][T12910] __msan_chain_origin+0xbf/0x140 [ 1171.698278][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.703440][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.708414][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1171.713308][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.717861][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.723815][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1171.729681][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.734831][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1171.739994][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1171.745147][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1171.751442][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.757989][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.762723][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.769101][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.774172][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.779063][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.783608][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.789985][T12910] RIP: 0023:0xf6ecc549 [ 1171.794067][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1171.813708][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1171.822148][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1171.830139][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1171.838131][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1171.846119][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1171.854106][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1171.862110][T12910] [ 1171.867958][T12910] Uninit was stored to memory at: [ 1171.873362][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.878512][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.883581][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.888154][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.892968][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.899345][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.904522][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.909423][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.914129][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.920510][T12910] [ 1171.922987][T12910] Uninit was stored to memory at: [ 1171.928068][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.933351][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.938332][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.943025][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1171.947749][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1171.954270][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1171.959349][T12910] do_fast_syscall_32+0x34/0x70 [ 1171.964400][T12910] do_SYSENTER_32+0x1b/0x20 [ 1171.968950][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1171.975480][T12910] [ 1171.977810][T12910] Uninit was stored to memory at: [ 1171.983047][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1171.988197][T12910] get_compat_msghdr+0x108/0x2c0 [ 1171.993292][T12910] do_recvmmsg+0xd77/0x2120 [ 1171.997840][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.002650][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.009026][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.014250][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.019151][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.023846][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.030232][T12910] [ 1172.032704][T12910] Uninit was stored to memory at: [ 1172.037780][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.043019][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.047996][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.052757][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.057476][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.063944][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.069027][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.074010][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.078556][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.085072][T12910] [ 1172.087400][T12910] Uninit was stored to memory at: [ 1172.092619][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.097767][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.102877][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.107422][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.112247][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.118709][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.123897][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.128793][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.133499][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.139880][T12910] [ 1172.142357][T12910] Uninit was stored to memory at: [ 1172.147422][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.152692][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.157666][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.162357][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.167083][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.173574][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.178641][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.183646][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.188193][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.194681][T12910] [ 1172.197009][T12910] Uninit was stored to memory at: [ 1172.202219][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.207360][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.212447][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.216987][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.221697][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.228203][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.233386][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.238272][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.242933][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.249307][T12910] [ 1172.251638][T12910] Local variable msg_sys created at: [ 1172.257020][T12910] do_recvmmsg+0xbb/0x2120 [ 1172.261476][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.538830][T12910] not chained 280000 origins [ 1172.543563][T12910] CPU: 1 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1172.552335][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.562406][T12910] Call Trace: [ 1172.565678][T12910] [ 1172.568599][T12910] dump_stack_lvl+0x1ff/0x28e [ 1172.573300][T12910] dump_stack+0x25/0x28 [ 1172.577466][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1172.583203][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.589040][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.594172][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.600008][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1172.605593][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.610748][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.616682][T12910] ? should_fail+0x75/0x9c0 [ 1172.621216][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.626353][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1172.632622][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1172.638723][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.643872][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.649706][T12910] __msan_chain_origin+0xbf/0x140 [ 1172.654762][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.659916][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.664908][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1172.669784][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.674314][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.680150][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1172.685985][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.691122][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1172.696326][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1172.701472][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1172.707748][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.714285][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.719015][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.725385][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.730453][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.735352][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.739895][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.746252][T12910] RIP: 0023:0xf6ecc549 [ 1172.750322][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1172.769958][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1172.778388][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1172.786389][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1172.794363][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.802337][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1172.810317][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1172.818327][T12910] [ 1172.824587][T12910] Uninit was stored to memory at: [ 1172.829687][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.836075][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.841060][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.845739][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.850473][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.856986][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.862156][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.867056][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.871600][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.878092][T12910] [ 1172.880422][T12910] Uninit was stored to memory at: [ 1172.885649][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.890791][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.895950][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.900515][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.905380][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.911915][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.916997][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.922044][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.926592][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.933138][T12910] [ 1172.935467][T12910] Uninit was stored to memory at: [ 1172.940531][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1172.945855][T12910] get_compat_msghdr+0x108/0x2c0 [ 1172.950832][T12910] do_recvmmsg+0xd77/0x2120 [ 1172.955545][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1172.960268][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1172.966750][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1172.971923][T12910] do_fast_syscall_32+0x34/0x70 [ 1172.976824][T12910] do_SYSENTER_32+0x1b/0x20 [ 1172.981373][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1172.987872][T12910] [ 1172.990199][T12910] Uninit was stored to memory at: [ 1172.995384][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.000586][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.005819][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.010370][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.015230][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.021604][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.026782][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.031673][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.036375][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.042834][T12910] [ 1173.045160][T12910] Uninit was stored to memory at: [ 1173.050218][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.055506][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.060473][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.065165][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.069880][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.076355][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.081419][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.086507][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.091049][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.097554][T12910] [ 1173.099884][T12910] Uninit was stored to memory at: [ 1173.105118][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.110287][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.115424][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.119982][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.124835][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.131209][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.136410][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.141346][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.146066][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.152546][T12910] [ 1173.154890][T12910] Uninit was stored to memory at: [ 1173.160069][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.165411][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.170394][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.175098][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.179821][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.186311][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.191387][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.196401][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.200949][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.207453][T12910] [ 1173.209793][T12910] Local variable msg_sys created at: [ 1173.215224][T12910] do_recvmmsg+0xbb/0x2120 [ 1173.219692][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.423601][T12910] not chained 290000 origins [ 1173.428242][T12910] CPU: 0 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1173.437046][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.447106][T12910] Call Trace: [ 1173.450383][T12910] [ 1173.453316][T12910] dump_stack_lvl+0x1ff/0x28e [ 1173.458024][T12910] dump_stack+0x25/0x28 [ 1173.462196][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1173.468045][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.473914][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.479062][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.484969][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1173.490555][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.495910][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.501756][T12910] ? should_fail+0x75/0x9c0 [ 1173.506321][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.511458][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1173.517731][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1173.523855][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.529018][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.534866][T12910] __msan_chain_origin+0xbf/0x140 [ 1173.539931][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.545094][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.550056][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1173.554934][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.559460][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.565299][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1173.571138][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.576302][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1173.581574][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1173.586723][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1173.593003][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.599538][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.604283][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.610655][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.615714][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.620596][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.625134][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.631514][T12910] RIP: 0023:0xf6ecc549 [ 1173.635600][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1173.655361][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1173.663935][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1173.671927][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1173.679910][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.687903][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1173.696131][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1173.704183][T12910] [ 1173.710198][T12910] Uninit was stored to memory at: [ 1173.715679][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.720832][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.725955][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.730531][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.735361][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.741743][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.746955][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.751962][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.756509][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.763027][T12910] [ 1173.765357][T12910] Uninit was stored to memory at: [ 1173.770414][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.775732][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.780712][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.785377][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.790098][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.796607][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.801678][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.806752][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.811340][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.817873][T12910] [ 1173.820212][T12910] Uninit was stored to memory at: [ 1173.825421][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.830580][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.835740][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.840296][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.845200][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.851572][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.856754][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.861654][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.866312][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.872791][T12910] [ 1173.875134][T12910] Uninit was stored to memory at: [ 1173.880203][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.885463][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.890440][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.895104][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.899831][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.906420][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.911501][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.916528][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.921077][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.927666][T12910] [ 1173.930020][T12910] Uninit was stored to memory at: [ 1173.935269][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.940435][T12910] get_compat_msghdr+0x108/0x2c0 [ 1173.945606][T12910] do_recvmmsg+0xd77/0x2120 [ 1173.950158][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1173.955071][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1173.961453][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1173.966666][T12910] do_fast_syscall_32+0x34/0x70 [ 1173.971568][T12910] do_SYSENTER_32+0x1b/0x20 [ 1173.976357][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1173.982984][T12910] [ 1173.985326][T12910] Uninit was stored to memory at: [ 1173.990402][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1173.996936][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.002411][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.006952][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.011746][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.018309][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.023532][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.028440][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.033130][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.039510][T12910] [ 1174.041999][T12910] Uninit was stored to memory at: [ 1174.047087][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.052523][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.057509][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.062220][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.066950][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.073497][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.078600][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.083723][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.088275][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.094787][T12910] [ 1174.097117][T12910] Local variable msg_sys created at: [ 1174.102642][T12910] do_recvmmsg+0xbb/0x2120 [ 1174.107142][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.278114][T12910] not chained 300000 origins [ 1174.282879][T12910] CPU: 1 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1174.291875][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.302407][T12910] Call Trace: [ 1174.305702][T12910] [ 1174.308643][T12910] dump_stack_lvl+0x1ff/0x28e [ 1174.313571][T12910] dump_stack+0x25/0x28 [ 1174.317836][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1174.323688][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.329822][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.334969][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.340820][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1174.346390][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.351633][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.357574][T12910] ? should_fail+0x75/0x9c0 [ 1174.362098][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.367251][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1174.373562][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1174.379671][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.384810][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.390783][T12910] __msan_chain_origin+0xbf/0x140 [ 1174.396112][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.401329][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.406295][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1174.411194][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.415717][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.421741][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1174.427653][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.432826][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1174.437998][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1174.443151][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1174.449461][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.456041][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.460796][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.467195][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.472259][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.477158][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.481702][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.488066][T12910] RIP: 0023:0xf6ecc549 [ 1174.492144][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1174.511888][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1174.520363][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1174.528345][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.536324][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.544317][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1174.552299][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.560304][T12910] [ 1174.568288][T12910] Uninit was stored to memory at: [ 1174.578411][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.583651][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.588628][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.593259][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.598070][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.604527][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.609685][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.614680][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.619578][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.626047][T12910] [ 1174.628472][T12910] Uninit was stored to memory at: [ 1174.633634][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.638782][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.643909][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.648545][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.653388][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.659757][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.664958][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.669855][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.674537][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.680909][T12910] [ 1174.683369][T12910] Uninit was stored to memory at: [ 1174.688433][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.693697][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.698673][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.703336][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.708063][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.714572][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.719654][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.724683][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.729231][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.735738][T12910] [ 1174.738069][T12910] Uninit was stored to memory at: [ 1174.743299][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.748641][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.753825][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.758387][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.763367][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.769840][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.775104][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.780016][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.784776][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.791170][T12910] [ 1174.793614][T12910] Uninit was stored to memory at: [ 1174.798709][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.804022][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.809015][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.813690][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.818428][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.824944][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.830026][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.835040][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.839612][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.846145][T12910] [ 1174.848485][T12910] Uninit was stored to memory at: [ 1174.853677][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.858907][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.864026][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.868592][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.873429][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.879822][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.885048][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.889960][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.894684][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.901081][T12910] [ 1174.903578][T12910] Uninit was stored to memory at: [ 1174.908658][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1174.913944][T12910] get_compat_msghdr+0x108/0x2c0 [ 1174.918962][T12910] do_recvmmsg+0xd77/0x2120 [ 1174.923652][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1174.928378][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1174.934887][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1174.939968][T12910] do_fast_syscall_32+0x34/0x70 [ 1174.944963][T12910] do_SYSENTER_32+0x1b/0x20 [ 1174.949518][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1174.956037][T12910] [ 1174.958369][T12910] Local variable msg_sys created at: [ 1174.963752][T12910] do_recvmmsg+0xbb/0x2120 [ 1174.968221][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.134965][T12910] not chained 310000 origins [ 1175.139586][T12910] CPU: 1 PID: 12910 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1175.148368][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.158446][T12910] Call Trace: [ 1175.161746][T12910] [ 1175.164857][T12910] dump_stack_lvl+0x1ff/0x28e [ 1175.169580][T12910] dump_stack+0x25/0x28 [ 1175.173755][T12910] kmsan_internal_chain_origin+0x78/0x110 [ 1175.179501][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.185343][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.190482][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.196326][T12910] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1175.201917][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.207048][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.212898][T12910] ? should_fail+0x75/0x9c0 [ 1175.217417][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.222550][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1175.228816][T12910] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1175.234958][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.240093][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.245926][T12910] __msan_chain_origin+0xbf/0x140 [ 1175.250990][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.256146][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.261101][T12910] ? __sys_recvmmsg+0x51c/0x6f0 [ 1175.265983][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.270540][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.276387][T12910] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1175.282234][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.287377][T12910] ? cgroup_bpf_attach+0xe0/0x2640 [ 1175.292590][T12910] ? kmsan_get_metadata+0x33/0x220 [ 1175.297752][T12910] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1175.304057][T12910] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.310593][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.315318][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.321686][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.326773][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.331658][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.336183][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.342542][T12910] RIP: 0023:0xf6ecc549 [ 1175.346616][T12910] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1175.366263][T12910] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1175.374710][T12910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1175.382696][T12910] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1175.390673][T12910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.398673][T12910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1175.406651][T12910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.414642][T12910] [ 1175.420946][T12910] Uninit was stored to memory at: [ 1175.426553][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.431707][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.436781][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.441338][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.446194][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.452668][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.457746][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.462832][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.467385][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.473935][T12910] [ 1175.476267][T12910] Uninit was stored to memory at: [ 1175.481324][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.486610][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.491586][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.496292][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.501012][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.507529][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.512699][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.517595][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.522298][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.528684][T12910] [ 1175.531000][T12910] Uninit was stored to memory at: [ 1175.536199][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.541345][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.546484][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.551031][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.555925][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.562395][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.567469][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.572518][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.577073][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.583648][T12910] [ 1175.585982][T12910] Uninit was stored to memory at: [ 1175.591663][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.596946][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.602024][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.606576][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.611270][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.617748][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.622912][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.627814][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.632561][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.638939][T12910] [ 1175.641258][T12910] Uninit was stored to memory at: [ 1175.646512][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.651651][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.656735][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.661275][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.666140][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.672593][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.677660][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.682708][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.687247][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.693776][T12910] [ 1175.696105][T12910] Uninit was stored to memory at: [ 1175.701228][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.706529][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.711496][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.716210][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.720924][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.727400][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.732556][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.737445][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.742112][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.748481][T12910] [ 1175.750793][T12910] Uninit was stored to memory at: [ 1175.756005][T12910] __get_compat_msghdr+0x6e1/0x9d0 [ 1175.761143][T12910] get_compat_msghdr+0x108/0x2c0 [ 1175.766263][T12910] do_recvmmsg+0xd77/0x2120 [ 1175.770804][T12910] __sys_recvmmsg+0x51c/0x6f0 [ 1175.775651][T12910] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1175.782125][T12910] __do_fast_syscall_32+0x96/0xf0 [ 1175.787189][T12910] do_fast_syscall_32+0x34/0x70 [ 1175.792214][T12910] do_SYSENTER_32+0x1b/0x20 [ 1175.796753][T12910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1175.803263][T12910] [ 1175.805594][T12910] Local variable msg_sys created at: [ 1175.810891][T12910] do_recvmmsg+0xbb/0x2120 [ 1175.815454][T12910] __sys_recvmmsg+0x51c/0x6f0 00:19:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) 00:19:35 executing program 1: syncfs(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001300), &(0x7f0000001340)={[0x1a6]}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000280)={[{@nombcache}, {@minixdf}, {@nojournal_checksum}, {@grpid}]}) mount$bpf(0x0, &(0x7f0000000340)='.\x00', &(0x7f00000011c0), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001ec0)=ANY=[@ANYBLOB="06fb010000b145e3180bb48426b58ee26ae64909d48dfa95f490b5c29ff9389f224c1d0f8d82b5401c68b18752f1f24810951641b2d28aa470a5fec7cc1cabfbdc679b6581b170cb2963e4d4421cf7cf61bf2e91106a5ccf86ced704dd5a91ce8fb6fa3bd4f0264986d9029c368058c1e293fdeab2ecadd3a1ccd738982be05e6527994f4d77691586962fb2ae58e80d061dbba03c9a595ffd4fb2788cd2a8e6147bf811fed93b0583e9ccd11df48aff0b5e0fc187392aa58728bbb313b8de8064e11cf658d4bb435e975574075faaae14529f47d687b1178c084e23c07574ca6d52155b5710231f80b96d6e3f99a05008ff65fc5a88242e8c12cf627442215a5eac9c07457af4980fb3cff8e999c94b6a95bb86457a9d71f139c054c26c88591fefa00524a080ffea5e29a99539b2beacc330b9c4c787e8adb5cf3e1dc30e877e2df587d44e9f2b204a99d914651fb183f816760ae3075916630905f52ddea2dad60a27da4650af5d05443215f78a826fd0599d12a4d9fabe4a3778ea20893b1afa01b78753cd758899b74aaad16b3f573eb2f39153b8c5cd0cbcd06274a462773e3f52bafe685084f9e482a3258cd3aedb1504cc0dcd567917600e564ff2d2fe8fb4afcd235db6db4fcda2b8f53798039f73dbd10b8c2f99697743a5b78a141f18a831aa794dd9430e2ab8b596e3d78e59d6763a86b0885e8f627002a5d77eac470fb685a4f7814b130fa4a7e5e66b3e6e3fae7bf31321c9f8858d8996c56391e41ed62fa28b4db74582f7578bc22266a64476654a23aa3878cc4e4b1c2d961f6e223498e0937572c7db8e6265063101cab017a65a7c77a503fec556060f8102caa95c5a23eebcdd3d1897f05f1328acae7446b5d5db454013c7e42c4d96accf8ddfe71fc7e5f56370d18a69dc699ad1303cb38a11f83d1a8660846755cd47a7f3a433a4011ee128b1e1ffec5a440621a6d044bd17ceee1f5cfec1dd35f41b89a816eaf5f25754307cb3968eae10d566fb79679c7af6ff82b28766cd99539dc09cefc0523a2112c5c81b269c8ec59131dbb9e5cb04d94b28f586b68b5d7df852866ad550768b34712a6080648ca5e3ddbb0996f0b0497ea907c6225d86664a4d5a659782373672b91e6c8ded3445dab6302bf55de0ba17560668426dcc562f757b019c878969a364a5e60be8eb6c3595846b7cbdbd0e1f88422a50d083bf65dd9dd2f5919bf38c2a74fce75f20517a17be51efd6f794e0f59e91da0478b833184db399e635d5c6a469bd5d1dde0c426fff46a4aea7af93ab32afef4d7864e7c7c6b81001293d1888b45f75e98707513fbd69ae16ac5b344532b7d62dcbfc1edc2bceab8a0ec62bf4638f13b968b764ece346288fceec159e68f49db618ea2ad067b301bb69ef7f983afd323738d9abdc729080130b00ee1e82997e9a41f03dd0712d73e334555e440d782adc17302bd3688b37e21dcc044cd139b7cf575ea372916ad6b94e6624cd77a97f18941e69eac13636a30e66cfdb31621145784864f25e61d66eabbafd2580bf1dd950a3e4884bf23c223711c833c715e8b1bf6a187da53bf021b53e5a3297e6d235b6effdd41c4b4de8a5bdbc84b002857e2483e35f3594809261454b257896e966c69b1fd95cc319e309e00e3f70b708794b742bb19234df85411c225b86c0115454a965b278dd5f6a7ea0e21c8679b57bf9090a1ce919c4d1056839725dcaa73640f3a9cc517284806653063fbb48bb614f1587f1cccb65f074c4508670f25e7a1fb3bb5b0c1a3d13b3a70a05f9be65880580809e80a5358132ed29a0ff8286d8de4812e4a0b5eb8bb12374ba43cf555fd033b9d4e95280293971fc81ff68c866df2cc49fecf90651b04de9d7552b98f757ffa00b0a7a3fab432dda48f6e3f2ac364a7a5749f56bf32142b2ad6c82f394477a7556a247d4863b2ba06b33e862f9ba43599c013d5739b3ce841e1776dbf03ef0b9c3fe3a138b2af1604c789b528dba03b5bdf6109adaf94aa24dad44b3257ca0f4e6800aaf1c0ef19c9461a56486d6909514b98603846d6ffb5d0acb57186dd9d6cd7420c86dd9f0bb66e55dd70438cf20ee740cf780ea58b9562df870fc18659a6d9185873870790c9f087082365f40d7de077b81131d1b6651cc2fbe656fa7ed8f56c03d082fbce1dc67325c57d5af51d5fd243eb34b3ff952dd17d84a5688be17341f9d1a12e14f164f1065769d1ee1500afd2b52eeb470412fe623d58815b0f1170d519659959471b23fae3175f1409148daeb6d1f27622fa63bf06ad61362aa831c5ef62a03607eb2b8542c4b17d1d3f915d93f5df579068f015f0c78d2d87805ebfe8e6f57ddeaeef2a73e0283680227f1987561999d1a4a9e1b11ab945458a17f5c8d161b82b416e00bc90d2d5f5efffeafea0c30a6dbef943d4a580c4785118da34fd15514b81a8e7b5a9eebfe59b0d3565ded6c5200b20bd56eed9f95bb0e4d68bb99ce629a646c69270492b00e984317bb17f6bb29c264f64347b4948044b9f35f72889a0733e9b5381beaa1f69a72aa57cc00c24916d98f26fe0cf0457ec975b037cca64d581dd32005b7d7d39f26eb688002561366d68057d4183e940b6509468f0268174b35e0e13a101a3071b58df7cbdbc7819b523e30b74ed088a32c7ba159abd986a4607ebfc036e396645705b076543dd27b33b7bcf5b2f7fe989902d346aea6c7ef67573c83903e09570bc48017e01bfe1686e9fe3da28e727d679ddca33ce193fd3c4a525c25eb9d4e0d727dd0c9c9ee3709755344828402a6d384ea16ad9bdac4518df78eb1a848c269c7571d56742c2ff67fba4a57aefc93c45f814e4eb8cb9c04989072a25c8ccca82862053c1c0fde1891e5c8f8783118485f25adb48a1dce26eacdd4ddc84d07473d61cf6ee6a4d28b022311f1b7151763e083488866a8a7edddc8f61ffb6451764a6008f022d346c819ec86a0256958265e5ce28da25f84e90cdf97abf746108d782661f5533547099a4f8928a071f0afbebcb4acb82eb3f8aa14df0823ceade1dfc7e052fdb79d7dabd5477f4d18b602721892c56a8de2e0a955dbd60201fbc4ebf088b6efd6ad133cdf5134825517a8a21e16ab52ce3dc4b75ff07e33d74d68d5bd04056c88cfeea72065bed06eb9ac039d8130477ca68b36c06a15567e178012e2e090b42bdc235e05ca662aae33c1f736aefb41621ed734813db359d6ee2c3ac01aec680369b7164325c6fbfe0b28363f7d88f132f0eae29f132757772fc7336c5554907ab10b7143da1b62d9dbaa960fb7e32700334ee6a00f0f4b68e86dc0cdf09a8919b37d5cca678cdb09b1ba31e32e6a8a873faff01e7e37aebdac6fe276539eb764c37b2c54942b2c3bff04ecebaffbfd871efd41b6392a1e3be49a078abd76f6ce08431ea920d04ea2972291169487a056d4719eb08c1f52ed3ea26af31ae9d9d16463387e6e1a6b0d66040a7af2f0ce3a0b8df477f06c64f30ba59f6dfade2cee217cf56fadc107d603c80a2e68dd8b11e84dad6857495435c6bf5d7af2bf02c3b05e472b736114ef171a5358908657a4923460e295097081baf8410e17c9fa58e908d67124cc25d73e8c09ddfdfc7f663fb40a72691164490b7ea506084777283b653d2622972afe4ab4b24919f12f54cb3e03fff483632543a202b4662b1056f6b20830f8bd0cdf2c48ee0f1ca966251d4c0ece6dc318a7b2da1c37204b7a699fd195b817f669c7060c958f2bddbb868aae4801325c7933833d65bc5a95a0cf12212053a7f140359ec41e4f13241f9dbce60b15c81b349f18e2839907b75ae71fed5d2551b289ab139cfe4d80bc495dba7142cf2a65607b9b"], 0xc001, 0x0) 00:19:35 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 00:19:35 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:19:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 00:19:35 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x415, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x38}}, 0x0) [ 1176.087152][T12934] loop1: detected capacity change from 0 to 512 00:19:36 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f08) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) 00:19:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x32314147}}) [ 1176.315465][ T24] audit: type=1800 audit(1176.343:233): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1161 res=0 errno=0 00:19:36 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 00:19:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x415, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x38}}, 0x0) [ 1176.409393][T12934] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,minixdf,nojournal_checksum,grpid,,errors=continue. Quota mode: none. [ 1176.658181][ T24] audit: type=1800 audit(1176.713:234): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1173 res=0 errno=0 [ 1176.679414][ T24] audit: type=1804 audit(1176.713:235): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir346919907/syzkaller.ulDWht/581/file0" dev="sda1" ino=1173 res=1 errno=0 00:19:36 executing program 0: r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='sync\x00', &(0x7f00000011c0)='s\x01\xa8rce', 0x0) 00:19:37 executing program 1: syncfs(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001300), &(0x7f0000001340)={[0x1a6]}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000280)={[{@nombcache}, {@minixdf}, {@nojournal_checksum}, {@grpid}]}) mount$bpf(0x0, &(0x7f0000000340)='.\x00', &(0x7f00000011c0), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0xc001, 0x0) [ 1177.011571][ T24] audit: type=1800 audit(1176.893:236): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 1177.916966][T12968] loop1: detected capacity change from 0 to 512 [ 1177.934195][T12957] not chained 320000 origins [ 1177.938828][T12957] CPU: 0 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1177.947639][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.957719][T12957] Call Trace: [ 1177.961017][T12957] [ 1177.963967][T12957] dump_stack_lvl+0x1ff/0x28e [ 1177.968736][T12957] dump_stack+0x25/0x28 [ 1177.972954][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1177.978736][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1177.984603][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1177.989772][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1177.995648][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1178.001247][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.006420][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1178.012282][T12957] ? should_fail+0x75/0x9c0 [ 1178.016828][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.021995][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1178.028303][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1178.034418][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.039574][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1178.045435][T12957] __msan_chain_origin+0xbf/0x140 [ 1178.050508][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.055676][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.060652][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1178.065549][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.070111][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.075269][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1178.081557][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.086711][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1178.092999][T12957] ? fput+0x82/0x320 [ 1178.096929][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.103477][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.108212][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.114593][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.119662][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.124555][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.129100][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.135475][T12957] RIP: 0023:0xf6ecc549 [ 1178.139558][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1178.159358][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1178.167819][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1178.175817][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.183825][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.191811][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1178.199896][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.207917][T12957] [ 1178.214499][T12957] Uninit was stored to memory at: [ 1178.219611][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.225203][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.230184][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.234828][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.239563][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.246038][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.251120][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.256169][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.260742][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.267281][T12957] [ 1178.269625][T12957] Uninit was stored to memory at: [ 1178.274879][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.280047][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.285165][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.289734][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.294608][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.300994][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.306242][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.311146][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.315840][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.322307][T12957] [ 1178.324726][T12957] Uninit was stored to memory at: [ 1178.329805][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.335047][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.340019][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.344650][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.349375][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.355854][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.360927][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.365916][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.370463][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.376929][T12957] [ 1178.379259][T12957] Uninit was stored to memory at: [ 1178.384421][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.389572][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.394627][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.399173][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.403986][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.410361][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.415525][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.420422][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.425135][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.431533][T12957] [ 1178.434010][T12957] Uninit was stored to memory at: [ 1178.439101][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.444391][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.449374][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.454080][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.458815][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.465345][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.470418][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.475416][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.479968][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.486516][T12957] [ 1178.488850][T12957] Uninit was stored to memory at: [ 1178.494075][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.499236][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.504317][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.508880][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.513857][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.520269][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.525497][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.530398][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.535103][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.541486][T12957] [ 1178.544001][T12957] Uninit was stored to memory at: [ 1178.549094][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1178.554395][T12957] get_compat_msghdr+0x108/0x2c0 [ 1178.559376][T12957] do_recvmmsg+0xd77/0x2120 [ 1178.564075][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.568809][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1178.575352][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1178.580434][T12957] do_fast_syscall_32+0x34/0x70 [ 1178.585502][T12957] do_SYSENTER_32+0x1b/0x20 [ 1178.590064][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1178.596611][T12957] [ 1178.598963][T12957] Local variable msg_sys created at: [ 1178.604405][T12957] do_recvmmsg+0xbb/0x2120 [ 1178.608876][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1178.649671][T12968] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,minixdf,nojournal_checksum,grpid,,errors=continue. Quota mode: none. [ 1178.942680][T12957] not chained 330000 origins [ 1178.947335][T12957] CPU: 0 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1178.956147][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.966233][T12957] Call Trace: [ 1178.969530][T12957] [ 1178.972470][T12957] dump_stack_lvl+0x1ff/0x28e [ 1178.977207][T12957] dump_stack+0x25/0x28 [ 1178.981404][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1178.987158][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1178.993039][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1178.998211][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.004091][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1179.009748][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.014899][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.020782][T12957] ? should_fail+0x75/0x9c0 [ 1179.025361][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.030552][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1179.036843][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1179.042960][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.048129][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.054019][T12957] __msan_chain_origin+0xbf/0x140 [ 1179.059105][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.064274][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.069286][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1179.074199][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.078826][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.083983][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1179.090299][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.095448][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1179.101743][T12957] ? fput+0x82/0x320 [ 1179.105701][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.112265][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.117029][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.123423][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.128512][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.133400][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.137952][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.144337][T12957] RIP: 0023:0xf6ecc549 [ 1179.148430][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1179.168084][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1179.176520][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1179.184526][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.192528][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.200523][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1179.208500][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.216498][T12957] [ 1179.222557][T12957] Uninit was stored to memory at: [ 1179.227657][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.233181][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.238167][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.242817][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.248093][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.254561][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.259652][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.264634][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.269174][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.275652][T12957] [ 1179.277981][T12957] Uninit was stored to memory at: [ 1179.283184][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.288502][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.293705][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.298254][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.303116][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.309500][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.314687][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.319579][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.324245][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.330615][T12957] [ 1179.333061][T12957] Uninit was stored to memory at: [ 1179.338137][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.343419][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.348476][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.353135][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.357882][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.364483][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.369551][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.374559][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.379104][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.385630][T12957] [ 1179.387957][T12957] Uninit was stored to memory at: [ 1179.393181][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.398679][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.403793][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.408349][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.413201][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.419571][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.424852][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.429774][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.434439][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.440815][T12957] [ 1179.443281][T12957] Uninit was stored to memory at: [ 1179.448358][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.453652][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.458624][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.463395][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.468204][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.474683][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.479750][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.484777][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.489320][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.495785][T12957] [ 1179.498163][T12957] Uninit was stored to memory at: [ 1179.503392][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.508719][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.513840][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.518481][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.523332][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.529712][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.534935][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.539848][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.544545][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.550927][T12957] [ 1179.553498][T12957] Uninit was stored to memory at: [ 1179.558589][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.563895][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.568881][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.573597][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.578326][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1179.584826][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1179.589903][T12957] do_fast_syscall_32+0x34/0x70 [ 1179.595181][T12957] do_SYSENTER_32+0x1b/0x20 [ 1179.599734][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1179.606283][T12957] [ 1179.608626][T12957] Local variable msg_sys created at: [ 1179.614082][T12957] do_recvmmsg+0xbb/0x2120 [ 1179.618558][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1179.850295][T12957] not chained 340000 origins [ 1179.855117][T12957] CPU: 1 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1179.863898][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.873976][T12957] Call Trace: [ 1179.877265][T12957] [ 1179.880191][T12957] dump_stack_lvl+0x1ff/0x28e [ 1179.884901][T12957] dump_stack+0x25/0x28 [ 1179.889076][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1179.894819][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.900655][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.905789][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.911626][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1179.917195][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.922324][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.928156][T12957] ? should_fail+0x75/0x9c0 [ 1179.932691][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.937822][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1179.944089][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1179.950186][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.955315][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1179.961152][T12957] __msan_chain_origin+0xbf/0x140 [ 1179.966211][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1179.971364][T12957] get_compat_msghdr+0x108/0x2c0 [ 1179.976328][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1179.981228][T12957] do_recvmmsg+0xd77/0x2120 [ 1179.985783][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1179.990924][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1179.997187][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.002327][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1180.008613][T12957] ? fput+0x82/0x320 [ 1180.012526][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.019150][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.023870][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.030229][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.035280][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.040327][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.044866][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.051220][T12957] RIP: 0023:0xf6ecc549 [ 1180.055294][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1180.074924][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1180.083355][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1180.091339][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.099314][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.107289][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1180.115276][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.123263][T12957] [ 1180.129785][T12957] Uninit was stored to memory at: [ 1180.135373][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.140525][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.145624][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.150177][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.155028][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.161532][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.166823][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.171841][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.176394][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.182906][T12957] [ 1180.185243][T12957] Uninit was stored to memory at: [ 1180.190309][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.195571][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.200552][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.205259][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.209990][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.216491][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.221567][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.226579][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.231126][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.237670][T12957] [ 1180.240018][T12957] Uninit was stored to memory at: [ 1180.245204][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.250347][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.255485][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.260037][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.264960][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.271341][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.276526][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.281423][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.286150][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.292626][T12957] [ 1180.294954][T12957] Uninit was stored to memory at: [ 1180.300008][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.305273][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.310251][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.314966][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.319690][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.326173][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.331242][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.336251][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.340802][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.347342][T12957] [ 1180.349671][T12957] Uninit was stored to memory at: [ 1180.354851][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.359992][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.365123][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.369671][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.374579][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.380950][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.386169][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.391067][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.395751][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.404463][T12957] [ 1180.406789][T12957] Uninit was stored to memory at: [ 1180.412047][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.417202][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.422315][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.426866][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.431568][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.438061][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.443239][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.448140][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.452890][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.459299][T12957] [ 1180.461614][T12957] Uninit was stored to memory at: [ 1180.466823][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.472051][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.477028][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.481570][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.486442][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.492922][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.497998][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.503079][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.507628][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.514201][T12957] [ 1180.516535][T12957] Local variable msg_sys created at: [ 1180.521984][T12957] do_recvmmsg+0xbb/0x2120 [ 1180.526530][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.711028][T12957] not chained 350000 origins [ 1180.715785][T12957] CPU: 1 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1180.724573][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.734775][T12957] Call Trace: [ 1180.738058][T12957] [ 1180.741038][T12957] dump_stack_lvl+0x1ff/0x28e [ 1180.745763][T12957] dump_stack+0x25/0x28 [ 1180.749969][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1180.755737][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1180.761577][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.766714][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1180.772575][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1180.778146][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.783281][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1180.789140][T12957] ? should_fail+0x75/0x9c0 [ 1180.793691][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.798858][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1180.805138][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1180.811262][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.816416][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1180.822258][T12957] __msan_chain_origin+0xbf/0x140 [ 1180.827332][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1180.832502][T12957] get_compat_msghdr+0x108/0x2c0 [ 1180.837482][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1180.842365][T12957] do_recvmmsg+0xd77/0x2120 [ 1180.846934][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.852102][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1180.858387][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1180.863522][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1180.869809][T12957] ? fput+0x82/0x320 [ 1180.873726][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.880291][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1180.885011][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1180.891387][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1180.896443][T12957] do_fast_syscall_32+0x34/0x70 [ 1180.901341][T12957] do_SYSENTER_32+0x1b/0x20 [ 1180.905878][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1180.912262][T12957] RIP: 0023:0xf6ecc549 [ 1180.916348][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1180.936000][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1180.944456][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1180.952455][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.960451][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.968428][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1180.976410][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.984407][T12957] [ 1180.992456][T12957] Uninit was stored to memory at: [ 1180.997564][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.005552][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.010547][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.015556][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.020286][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.026808][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.031979][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.036878][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.041425][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.047902][T12957] [ 1181.050241][T12957] Uninit was stored to memory at: [ 1181.055470][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.060620][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.065708][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.070257][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.075119][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.081495][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.086678][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.091577][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.096273][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.102754][T12957] [ 1181.105092][T12957] Uninit was stored to memory at: [ 1181.110152][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.115439][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.120421][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.125090][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.129818][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.136333][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.141409][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.146419][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.150968][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.157493][T12957] [ 1181.159824][T12957] Uninit was stored to memory at: [ 1181.165047][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.170189][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.175333][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.179895][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.184779][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.191158][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.196396][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.201311][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.205996][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.212471][T12957] [ 1181.214802][T12957] Uninit was stored to memory at: [ 1181.219888][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.225203][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.230191][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.234912][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.239641][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.246131][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.251207][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.256238][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.260787][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.267284][T12957] [ 1181.269617][T12957] Uninit was stored to memory at: [ 1181.274841][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.279992][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.285072][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.289619][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.294470][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.300849][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.306053][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.310949][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.315637][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.322077][T12957] [ 1181.324392][T12957] Uninit was stored to memory at: [ 1181.329446][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.334726][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.339711][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.344370][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.349094][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.355587][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.360662][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.365665][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.370209][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.376716][T12957] [ 1181.379045][T12957] Local variable msg_sys created at: [ 1181.384499][T12957] do_recvmmsg+0xbb/0x2120 [ 1181.388961][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.555395][T12957] not chained 360000 origins [ 1181.560037][T12957] CPU: 0 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1181.568812][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.578888][T12957] Call Trace: [ 1181.582163][T12957] [ 1181.585092][T12957] dump_stack_lvl+0x1ff/0x28e [ 1181.589812][T12957] dump_stack+0x25/0x28 [ 1181.593999][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1181.599787][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1181.605626][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.610780][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1181.616619][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1181.622209][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.627388][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1181.633219][T12957] ? should_fail+0x75/0x9c0 [ 1181.637736][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.642866][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1181.649131][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1181.655219][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.660347][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1181.666179][T12957] __msan_chain_origin+0xbf/0x140 [ 1181.671236][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.676383][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.681340][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1181.686217][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.690754][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.695895][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1181.702161][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1181.707302][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1181.713591][T12957] ? fput+0x82/0x320 [ 1181.717518][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.724070][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.728786][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.735143][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.740195][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.745069][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.749591][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.755943][T12957] RIP: 0023:0xf6ecc549 [ 1181.760014][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1181.779640][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1181.788066][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1181.796041][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1181.804013][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1181.811989][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1181.819972][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.827989][T12957] [ 1181.836008][T12957] Uninit was stored to memory at: [ 1181.841111][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.847786][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.853016][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.857564][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.862415][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.868789][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.873983][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.878881][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.883615][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.889997][T12957] [ 1181.892487][T12957] Uninit was stored to memory at: [ 1181.897576][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.902882][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.907854][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.912532][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.917260][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.923772][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.928850][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.933905][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.938451][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.945025][T12957] [ 1181.947360][T12957] Uninit was stored to memory at: [ 1181.952609][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1181.957757][T12957] get_compat_msghdr+0x108/0x2c0 [ 1181.962831][T12957] do_recvmmsg+0xd77/0x2120 [ 1181.967379][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1181.972278][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1181.978734][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1181.983931][T12957] do_fast_syscall_32+0x34/0x70 [ 1181.988842][T12957] do_SYSENTER_32+0x1b/0x20 [ 1181.993565][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1181.999952][T12957] [ 1182.002455][T12957] Uninit was stored to memory at: [ 1182.007540][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.012876][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.017849][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.022538][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.027267][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.033811][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.038886][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.043893][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.048439][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.055059][T12957] [ 1182.057391][T12957] Uninit was stored to memory at: [ 1182.062642][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.067791][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.072924][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.077471][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.082304][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.088688][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.093938][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.098839][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.103495][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.109873][T12957] [ 1182.112368][T12957] Uninit was stored to memory at: [ 1182.117452][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.122779][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.127765][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.132426][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.137156][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.143690][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.148763][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.153789][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.158341][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.165008][T12957] [ 1182.167338][T12957] Uninit was stored to memory at: [ 1182.172584][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.177730][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.182915][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.187461][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.192345][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.198716][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.203907][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.208809][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.213472][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.219854][T12957] [ 1182.222354][T12957] Local variable msg_sys created at: [ 1182.227650][T12957] do_recvmmsg+0xbb/0x2120 [ 1182.232271][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.395534][T12957] not chained 370000 origins [ 1182.400284][T12957] CPU: 1 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1182.409067][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.419136][T12957] Call Trace: [ 1182.422427][T12957] [ 1182.425356][T12957] dump_stack_lvl+0x1ff/0x28e [ 1182.430070][T12957] dump_stack+0x25/0x28 [ 1182.434257][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1182.440042][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1182.445880][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.451013][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1182.456849][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1182.462415][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.467551][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1182.473383][T12957] ? should_fail+0x75/0x9c0 [ 1182.477903][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.483036][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1182.489300][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1182.495392][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.500520][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1182.506347][T12957] __msan_chain_origin+0xbf/0x140 [ 1182.511391][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.516542][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.521496][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1182.526374][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.530914][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.536065][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1182.542358][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1182.547494][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1182.553778][T12957] ? fput+0x82/0x320 [ 1182.557702][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.564234][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.568967][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.575352][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.580412][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.585283][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.589812][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.596170][T12957] RIP: 0023:0xf6ecc549 [ 1182.600248][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1182.619899][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1182.628430][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1182.636416][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1182.644409][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1182.652391][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1182.660370][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.668364][T12957] [ 1182.675579][T12957] Uninit was stored to memory at: [ 1182.680676][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.686561][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.691547][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.696237][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.700965][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.707663][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.712989][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.717894][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.722626][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.729108][T12957] [ 1182.731467][T12957] Uninit was stored to memory at: [ 1182.736791][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.742032][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.747030][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.751607][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.756510][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.762949][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.768005][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.773070][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.777706][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.784273][T12957] [ 1182.786605][T12957] Uninit was stored to memory at: [ 1182.791691][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.797038][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.802108][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.806660][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.811441][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.817995][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.823170][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.828063][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.832777][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.839152][T12957] [ 1182.841475][T12957] Uninit was stored to memory at: [ 1182.846722][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.851947][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.856916][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.861449][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.866274][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.872727][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.877793][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.882830][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.887372][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.893872][T12957] [ 1182.896201][T12957] Uninit was stored to memory at: [ 1182.901251][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.906553][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.911544][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.916240][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.920958][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.927456][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.932629][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.937515][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.942197][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1182.948571][T12957] [ 1182.950895][T12957] Uninit was stored to memory at: [ 1182.956092][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1182.961247][T12957] get_compat_msghdr+0x108/0x2c0 [ 1182.966324][T12957] do_recvmmsg+0xd77/0x2120 [ 1182.970877][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1182.975729][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1182.982212][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1182.987302][T12957] do_fast_syscall_32+0x34/0x70 [ 1182.992340][T12957] do_SYSENTER_32+0x1b/0x20 [ 1182.996887][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.003361][T12957] [ 1183.005691][T12957] Uninit was stored to memory at: [ 1183.010767][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.016059][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.021026][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.025697][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.030415][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.036887][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.042041][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.046934][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.051468][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.057968][T12957] [ 1183.060296][T12957] Local variable msg_sys created at: [ 1183.065697][T12957] do_recvmmsg+0xbb/0x2120 [ 1183.070150][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.225416][T12957] not chained 380000 origins [ 1183.230056][T12957] CPU: 0 PID: 12957 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0 [ 1183.238828][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.248884][T12957] Call Trace: [ 1183.252164][T12957] [ 1183.255101][T12957] dump_stack_lvl+0x1ff/0x28e [ 1183.259823][T12957] dump_stack+0x25/0x28 [ 1183.263990][T12957] kmsan_internal_chain_origin+0x78/0x110 [ 1183.269799][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1183.275686][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.280832][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1183.286705][T12957] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1183.292273][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.297406][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1183.303238][T12957] ? should_fail+0x75/0x9c0 [ 1183.307763][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.312911][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1183.319180][T12957] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1183.325272][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.330403][T12957] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1183.336235][T12957] __msan_chain_origin+0xbf/0x140 [ 1183.341279][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.346439][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.351429][T12957] ? __sys_recvmmsg+0x51c/0x6f0 [ 1183.356331][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.360908][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.366065][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1183.372439][T12957] ? kmsan_get_metadata+0x33/0x220 [ 1183.377595][T12957] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1183.383898][T12957] ? fput+0x82/0x320 [ 1183.387839][T12957] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.394381][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.399178][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.405535][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.410585][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.415451][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.419966][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.426312][T12957] RIP: 0023:0xf6ecc549 [ 1183.430374][T12957] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1183.450000][T12957] RSP: 002b:00000000f58a55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1183.458446][T12957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1183.466445][T12957] RDX: 0000000000010106 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.474432][T12957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.482407][T12957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1183.490377][T12957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.498359][T12957] [ 1183.503778][T12957] Uninit was stored to memory at: [ 1183.508866][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.514432][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.519406][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.524077][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.528799][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.535344][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.540415][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.545485][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.550029][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.556584][T12957] [ 1183.558935][T12957] Uninit was stored to memory at: [ 1183.564181][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.569337][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.574480][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.579022][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.583868][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.590249][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.595434][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.600325][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.605032][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.611403][T12957] [ 1183.613890][T12957] Uninit was stored to memory at: [ 1183.618976][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.624268][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.629233][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.633888][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.638610][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.645104][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.650174][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.655174][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.659734][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.666258][T12957] [ 1183.668582][T12957] Uninit was stored to memory at: [ 1183.673714][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.678830][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.683955][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.688494][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.693362][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.699727][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.704922][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.709814][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.714468][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.720836][T12957] [ 1183.723320][T12957] Uninit was stored to memory at: [ 1183.728399][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.733699][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.738667][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.743357][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.748070][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.754545][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.759611][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.764664][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.769219][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.775703][T12957] [ 1183.778029][T12957] Uninit was stored to memory at: [ 1183.783272][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.788416][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.793652][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.798192][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.803025][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.809395][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.814630][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.819526][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.824202][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.830572][T12957] [ 1183.833069][T12957] Uninit was stored to memory at: [ 1183.838136][T12957] __get_compat_msghdr+0x6e1/0x9d0 [ 1183.843440][T12957] get_compat_msghdr+0x108/0x2c0 [ 1183.848414][T12957] do_recvmmsg+0xd77/0x2120 [ 1183.853105][T12957] __sys_recvmmsg+0x51c/0x6f0 [ 1183.857825][T12957] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1183.864377][T12957] __do_fast_syscall_32+0x96/0xf0 [ 1183.869448][T12957] do_fast_syscall_32+0x34/0x70 [ 1183.874456][T12957] do_SYSENTER_32+0x1b/0x20 [ 1183.879000][T12957] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1183.885523][T12957] [ 1183.887849][T12957] Local variable msg_sys created at: [ 1183.893247][T12957] do_recvmmsg+0xbb/0x2120 [ 1183.897711][T12957] __sys_recvmmsg+0x51c/0x6f0 00:19:44 executing program 1: syncfs(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000001180)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001300), &(0x7f0000001340)={[0x1a6]}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000280)={[{@nombcache}, {@minixdf}, {@nojournal_checksum}, {@grpid}]}) mount$bpf(0x0, &(0x7f0000000340)='.\x00', &(0x7f00000011c0), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0xc001, 0x0) 00:19:44 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_RMID(r0, 0x0) 00:19:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x9, {0x9, 0x0, "cc32ae747035b8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:19:44 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x415, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x38}}, 0x0) 00:19:44 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f08) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 1184.066237][ T24] audit: type=1800 audit(1184.123:237): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1177 res=0 errno=0 [ 1184.089077][ T24] audit: type=1804 audit(1184.123:238): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir346919907/syzkaller.ulDWht/582/file0" dev="sda1" ino=1177 res=1 errno=0 [ 1184.255939][T12983] loop1: detected capacity change from 0 to 512 [ 1184.525247][ T5220] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1184.576275][ T24] audit: type=1800 audit(1184.223:239): pid=12980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 1184.729413][T12983] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,minixdf,nojournal_checksum,grpid,,errors=continue. Quota mode: none. 00:19:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r0) [ 1184.945190][ T5220] usb 1-1: Using ep0 maxpacket: 16 00:19:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000a, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f00c0ed000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000003980)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f00000002c0)="111fc0d901b7", 0x6, 0x6800}, {&(0x7f0000012e00)="5841000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f465001000005fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f00000000c0)) 00:19:45 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x1000) [ 1185.062736][ T5220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.074028][ T5220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.084162][ T5220] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1185.093466][ T5220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:45 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f08) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) [ 1185.302037][ T5220] usb 1-1: config 0 descriptor?? 00:19:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8, 0x2, r1}}}}}]}, 0x40}}, 0x0) 00:19:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delqdisc={0x48, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0x5, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) 00:19:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) close(r1) [ 1185.722677][ T24] audit: type=1800 audit(1185.773:240): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1177 res=0 errno=0 [ 1185.744357][ T24] audit: type=1804 audit(1185.783:241): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir346919907/syzkaller.ulDWht/583/file0" dev="sda1" ino=1177 res=1 errno=0 [ 1185.787479][ T5220] logitech-djreceiver 0003:046D:C539.0020: unknown main item tag 0x3 [ 1185.796407][ T5220] logitech-djreceiver 0003:046D:C539.0020: unknown main item tag 0x7 [ 1185.986968][ T3567] usb 1-1: USB disconnect, device number 32 00:19:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8990, &(0x7f0000000000)={'ip6tnl0\x00'}) 00:19:46 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005b00)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:19:46 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, 0x0, 0x6}) 00:19:46 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 00:19:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xbf22}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 00:19:46 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f08) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) [ 1186.650124][ T24] audit: type=1800 audit(1186.703:242): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1177 res=0 errno=0 [ 1186.737748][ T24] audit: type=1804 audit(1186.743:243): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir346919907/syzkaller.ulDWht/584/file0" dev="sda1" ino=1177 res=1 errno=0 00:19:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 00:19:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000001f40)=""/4096, 0x20002f40}], 0x1, 0x0, 0x300000) 00:19:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x10, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x3e, 0x8e, 0x1}, 0x20) 00:19:47 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200) 00:19:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/1762], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca", 0x0, 0x0, 0xf0ffff, 0x29, 0x0, &(0x7f0000000140)="37a4e2ff3fb92f41bf2df61c2d0b60585af129da3f1b152224283dac43d04db0e55daf92b65bd4c4d1", 0x0}, 0x48) [ 1187.241446][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:47 executing program 2: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 00:19:47 executing program 5: r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf0, 0x6f, 0x29, 0x40, 0x12cf, 0x7111, 0x4411, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x84, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:19:47 executing program 3: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8922, 0x0) 00:19:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x46000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cd75037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff1fb1e98e92ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13476bf7e060e3670ef0e789f93781965f172d96704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a16e9e184b751c51160fbce841f8a97b32788ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c64e54861d0227dbfd47d8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab554ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bcffc2cc788bee1b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d73899253b4064b333ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d382578673f8b6e74ce23877a6b24db0e067345562942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b400000000cc0000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517a3e1a9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448cd81859968fe0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee938622e6bbcb80f87b415263c401e64ed97116ee0c1fa9185bc68477b8521cb0c69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be951096ea948cfa8e7194123e918914a71ad5a8521fb956d05000000719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bf8c2c418cd4875fb49e2989177a1bcd1e30280bc5ee7bcc8355539043f06586e79a5dd8076c248e97b3ce267dd4e27b6ef206660090bb2564474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e54b7fc96d6a706008ed3e14a0c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bed1c7c472311339d4b0c4d000000000000005333c6099c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105cddd77ab929b837d54aa17fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df3108d5bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2d0908be79314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc175876410c02889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000f7ffffffffffffff000000fa80459bb5d3c2f325288c2cc2734810e711209f233ad097c30ba8c0f8555f8b304a1acfb009a7f2ee0d0380a2f2a8795172af094a2751c35f807949973491c5b22ad1e9d89d21d7f30e51f686b176eb732565750250ebcc9a40a6c909ec929395459ac5a81b9627c05dbd5228d6e28f88fda08e68d7318d27b2bc5c21eebca3727b168ce336813c6cf83956f1ddc7851142143f1ab078436f068f8e2819f21c5b3a74605a2d7420a2db49f7afa89f0b2b02b13fea020a6f100edadbf1d3a861174e87122b76f5cb7928bd85a93f5b68f5f76e1a08c19972040011ae3f69c9a5e09a8c2a806749da91d43fbe78133cf4797a0e9c57abc2cc00000000007416512fa49f8304d2e1b77777664faa5f72f3e8b0e316fcdf1d0c7a2e063137e675da74ede4b09c08bc9ef120ef783c1432f8f6a5b77a0e83b3323458e8c1e4f033fa1fb82827743f878f8b395ba14d767ed456a6dec8a0f93a7f097ffb052ce700000000008c9a0a41bfe275c6e85ea317696a7e24633f15916480e39fb9f34107e197fe470542d21dcabe78274350f544c5f1c2b9a0216a5bb1491f3a5b466e563087297911f4c47a424641e758c053f2cf4492a76a0949e072b431451b97317781e5ec41b58cff20853820e16c2cab008b5a3709a9920c1dbbf243f19bb331d315655e7751b0acf08ee3e07301ea3e0080e8803fe29f635b687a2e934ce5098c15d5a230b6762980c69af7090000000000007d81a7768643dd272a8b85ee992fbbbaeb2e13cbb906a8b358410bf481494c75178ed2933025295d3c5186e833be603e33c5c0d82475849b9729137d136e239edcfd69ff01b14d80bf0a735591f69d0d247c7db4f99fdac7a1d4d7e1cb382c8b7d81e1f858f9d503277a635d779a129f3e9bbd7e7eb78671684a23927fab628088de6be3f1541557caaddba55468da65b21b2ae3d0c8f8e241e25559980553d609aebd4091de52dbeff57347817e60921a20a11eef3e25a8c64e2ac64f54ea32926407c414634a1f0b0a27"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x600}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007e80)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/126, 0x7e}, {&(0x7f0000000740)=""/164, 0xa4}], 0x8}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/216, 0xd8}, {0x0}], 0x2}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/53, 0x35}, {&(0x7f0000001e00)=""/220, 0xdc}, {0x0}, {&(0x7f0000001f80)=""/137, 0x89}, {&(0x7f0000002040)=""/73, 0x49}, {&(0x7f0000004bc0)=""/219, 0xdb}, {0x0}], 0x9, &(0x7f0000004cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004d00)=""/5, 0x5}, {&(0x7f0000004d40)=""/13, 0xd}, {&(0x7f0000004d80)=""/43, 0x2b}, {&(0x7f0000004dc0)=""/160, 0xa0}, {&(0x7f0000004e80)=""/173, 0xad}, {&(0x7f0000004f40)=""/251, 0xfb}, {&(0x7f0000005040)=""/184, 0xb8}, {&(0x7f0000005100)=""/173, 0xad}, {&(0x7f00000051c0)=""/206, 0xce}], 0x9}}, {{&(0x7f0000005380), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000005400)=""/14, 0xe}, {&(0x7f0000005440)=""/27, 0x1b}, {&(0x7f0000005480)=""/80, 0x50}, {&(0x7f0000005500)=""/32, 0x20}, {&(0x7f0000005540)=""/217, 0xd9}, {&(0x7f0000005640)=""/224, 0xe0}, {&(0x7f00000057c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000006980)=@abs, 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000006a00)=""/159, 0x9f}, {&(0x7f0000006ac0)=""/191, 0xbf}, {&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/84, 0x54}, {&(0x7f0000007c00)=""/174, 0xae}, {&(0x7f0000007cc0)=""/245, 0xf5}], 0x6}}], 0x7, 0x2120, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x8000000, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5}, &(0x7f0000000380)={0x0, r3+30000000}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0xf000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632977fbac141442e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 00:19:47 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:19:47 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="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", 0x148) 00:19:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 00:19:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x12}) [ 1188.002810][ T3567] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1188.047402][T13050] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 00:19:48 executing program 0: r0 = getuid() syz_clone(0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) syz_clone(0x2480, 0x0, 0x0, 0x0, 0x0, 0x0) getuid() getuid() syz_clone(0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) ioprio_set$uid(0x3, r0, 0x4000) 00:19:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x9, 0x9, 0x10}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) [ 1188.382736][ T3567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1188.394265][ T3567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1188.409791][ T3567] usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11 [ 1188.419196][ T3567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:48 executing program 3: pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_io_uring_setup(0x3edd, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:19:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/160, 0x27, 0xa0, 0x1}, 0x20) [ 1188.714963][ T3567] usb 6-1: config 0 descriptor?? 00:19:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000400)='ramfs\x00', 0x0, &(0x7f0000000480)='ramfs\x00', 0x0]) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1}) unshare(0x40600) ftruncate(r0, 0x0) fchmod(r0, 0x0) [ 1188.972561][ T3567] radio-si470x 6-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 1189.193067][ T3567] radio-si470x 6-1:0.0: software version 100, hardware version 101 [ 1189.412273][ T3567] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1189.421005][ T3567] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 1189.446949][ T3567] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1189.456424][ T3567] radio-si470x: probe of 6-1:0.0 failed with error -22 [ 1189.566868][ T3567] usb 6-1: USB disconnect, device number 23 00:19:50 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="850000002e00000035000000000000008500000008000000950000000000000000000000271e3503200ffa95a2c8c037c5a142dfa8d7628706ec5197fabd5f9810e81ae0b737129a9934d839cd34d5aeed8d38e65cb6e22ff5dde54704d255a2350ea7c09c4f42a5f0a8320e13822c45c0f8612c10b10000002701d3712c7e93363af3166a32d95433bb755a2dd576090c4867a7b6393e36ef16f41829b0166c6386d5ec7209d031f40f3012e9576e51a7f550afc852003bf3e4195cc037102124d85cec074c694997f5fe47fe5f17fdab800f4104a46aa43a815b1e5c6d1d224f64be6c4d7f47ef21030046f9aa4a0879f8555eaea768c1f2c221c110ef4b253d110ee282ab76f593d928cf95846be6277c043725cdb8c5324812696a623cd8a4f8dc8dcba00b1b2d274714667d510ba0e37b56c0ebfb19a342682fb98c1452b6518a6ef7297f7b2744419af53e5309ec91d83cf4fbd775d9c07d8d591a4dac60ff000000b78863e629b3b200000000000000000000000000000000000000449c810d3174c87ee545867a3126af7a8b20744e00000000000000000000008100000000ca4737fed0fa81f29ad592a24d6d9334b3e9cae39cb05c1dcfe37d9a0a66bf8d27474cc4d47b51d5d0fbe88af5e6d63839c2853f162a00"/501], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 00:19:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\r2x\xc5\x9b\x8c\x9dr\a\x051\xff\x9ci\x88\xae\xee\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r1, r2, &(0x7f00000001c0), 0xffff) fcntl$addseals(r2, 0x409, 0x8) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1}, 0x0) lseek(r2, 0x0, 0x3) 00:19:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000007e40)={'batadv0\x00', &(0x7f0000007e00)=@ethtool_gstrings={0x1b, 0x1}}) 00:19:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/xz_dec', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000002f80)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0) 00:19:50 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000a5c0)=ANY=[@ANYBLOB="8c4c00003000f5ffffff00000000000000000000784c0100500001000c000100736b6265646974003c00028018000900200000000000000000000000000000000000000008000300000000001800020001"], 0x4c8c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 1190.372363][T13076] netlink: 19492 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.382322][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.391651][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/xz_dec', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000002f80)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0) 00:19:50 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) 00:19:50 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000a5c0)=ANY=[@ANYBLOB="8c4c00003000f5ffffff00000000000000000000784c0100500001000c000100736b6265646974003c00028018000900200000000000000000000000000000000000000008000300000000001800020001"], 0x4c8c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 00:19:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = getpid() r2 = getpid() tgkill(r2, r1, 0x0) [ 1190.820042][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.827989][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.852970][T13081] netlink: 19492 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.863617][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.873324][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/xz_dec', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000002f80)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0) 00:19:51 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000a5c0)=ANY=[@ANYBLOB="8c4c00003000f5ffffff00000000000000000000784c0100500001000c000100736b6265646974003c00028018000900200000000000000000000000000000000000000008000300000000001800020001"], 0x4c8c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 1191.787130][T13092] netlink: 19492 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.797007][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.806733][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000400)='ramfs\x00', 0x0, &(0x7f0000000480)='ramfs\x00', 0x0]) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1}) unshare(0x40600) ftruncate(r0, 0x0) fchmod(r0, 0x0) 00:19:52 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) 00:19:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0x3, 0xffffffff}) 00:19:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000080)=""/174, 0x2d, 0xae, 0x1}, 0x20) 00:19:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/xz_dec', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, &(0x7f0000002f80)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0) 00:19:52 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000a5c0)=ANY=[@ANYBLOB="8c4c00003000f5ffffff00000000000000000000784c0100500001000c000100736b6265646974003c00028018000900200000000000000000000000000000000000000008000300000000001800020001"], 0x4c8c}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 1192.798835][T13101] netlink: 19492 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1192.809529][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1192.815958][T13102] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1192.819264][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1192.827229][T13102] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:52 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0x9e0) 00:19:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bb9b40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 00:19:53 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) dup(r0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffff801, 0x40, @private1, @remote, 0x7800, 0x1, 0x4, 0x8000}}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x2029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0x460c6}}}) 00:19:53 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) 00:19:53 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) shutdown(r1, 0x1) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:19:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)={0xa, 0xe24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8800) close(r0) [ 1194.256027][T13121] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1194.264507][T13121] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1194.390822][ T5724] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1194.802346][ T5724] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1194.811573][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:19:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000400)='ramfs\x00', 0x0, &(0x7f0000000480)='ramfs\x00', 0x0]) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1}) unshare(0x40600) ftruncate(r0, 0x0) fchmod(r0, 0x0) 00:19:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c00210000000000002164000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080074001d0000000000001d00080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xe000}, {&(0x7f0000011500)='f', 0x1, 0xe800}], 0x0, &(0x7f0000012200)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 00:19:54 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) 00:19:54 executing program 2: r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffdf}, 0x20) ioctl$TUNSETIFINDEX(r0, 0x400454ca, &(0x7f0000000200)) ioctl$TUNSETOWNER(r0, 0x400454d0, 0xffffffffffffffff) [ 1194.928244][ T5724] usb 2-1: config 0 descriptor?? 00:19:55 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) dup(r0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffff801, 0x40, @private1, @remote, 0x7800, 0x1, 0x4, 0x8000}}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x2029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0x460c6}}}) [ 1195.043010][T13129] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1195.051527][T13129] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$can_j1939(0x1d, 0x2, 0x7) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 00:19:55 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e091511131"]}]}, 0x114}], 0x1}, 0x0) [ 1196.157863][ T5724] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 1196.166525][ T5724] usb 2-1: Firmware version (0.0) predates our first public release. [ 1196.175556][ T5724] usb 2-1: Please update to version 0.2 or newer [ 1196.182315][ T5724] usb 2-1: atusb_probe: initialization failed, error = -71 [ 1196.190073][ T5724] atusb: probe of 2-1:0.0 failed with error -71 [ 1196.316343][T13147] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1196.325378][T13147] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:56 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup3(r1, r0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=',', 0x1}], 0x1, &(0x7f0000001500)=[@prinfo={0x14}, @sndinfo={0x1c, 0x84, 0x2, {0x0, 0x3}}], 0x30}, 0x0) 00:19:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1012f, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000002000)=[{r1, 0x2103, 0x64}], 0x7, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 00:19:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}]}, 0x3c}}, 0x0) 00:19:57 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/12, 0xc}, {&(0x7f0000001500)=""/101, 0x65}], 0x2, 0x0, 0x0) 00:19:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4d}}) [ 1197.477764][T13159] dlm: non-version read from control device 101 [ 1198.833304][T13153] not chained 390000 origins [ 1198.838217][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1198.847021][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1198.857100][T13153] Call Trace: [ 1198.860397][T13153] [ 1198.863341][T13153] dump_stack_lvl+0x1ff/0x28e [ 1198.868074][T13153] dump_stack+0x25/0x28 [ 1198.872272][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1198.878041][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1198.884157][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.889315][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1198.895176][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1198.900771][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.905930][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1198.911791][T13153] ? should_fail+0x75/0x9c0 [ 1198.916339][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.921492][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1198.927787][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1198.933907][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.939059][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1198.944917][T13153] __msan_chain_origin+0xbf/0x140 [ 1198.949989][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1198.955155][T13153] get_compat_msghdr+0x108/0x2c0 [ 1198.960135][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1198.965038][T13153] do_recvmmsg+0xd77/0x2120 [ 1198.969606][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.974776][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1198.981070][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1198.986227][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1198.992519][T13153] ? fput+0x82/0x320 [ 1198.996469][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.003020][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.007762][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.014158][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.019281][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.024196][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.028753][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.035137][T13153] RIP: 0023:0xf6e75549 [ 1199.039234][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1199.058892][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1199.067353][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1199.075361][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1199.083355][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.091352][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1199.099348][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.107361][T13153] [ 1199.116361][T13153] Uninit was stored to memory at: [ 1199.121458][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.130939][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.136378][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.141042][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.146001][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.152483][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.157567][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.162714][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.167281][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.173776][T13153] [ 1199.176111][T13153] Uninit was stored to memory at: [ 1199.181197][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.186930][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.192003][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.196566][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.201379][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.207920][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.213170][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.218068][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.222723][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.229111][T13153] [ 1199.231440][T13153] Uninit was stored to memory at: [ 1199.236631][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.242058][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.247035][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.251585][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.256420][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.262881][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.267954][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.272960][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.277596][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.284080][T13153] [ 1199.286407][T13153] Uninit was stored to memory at: [ 1199.291481][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.296743][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.301724][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.306364][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.311084][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.317565][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.322808][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.327709][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.332362][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.338744][T13153] [ 1199.341257][T13153] Uninit was stored to memory at: [ 1199.346446][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.351593][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.356672][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.361221][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.366045][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.372608][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.378067][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.383068][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.387616][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.394110][T13153] [ 1199.396440][T13153] Uninit was stored to memory at: [ 1199.401521][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.406798][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.411871][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.416420][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.421142][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.427639][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.432799][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.437710][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.442455][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.448839][T13153] [ 1199.451168][T13153] Uninit was stored to memory at: [ 1199.456355][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1199.461504][T13153] get_compat_msghdr+0x108/0x2c0 [ 1199.466580][T13153] do_recvmmsg+0xd77/0x2120 [ 1199.471129][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1199.476042][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1199.482497][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1199.487579][T13153] do_fast_syscall_32+0x34/0x70 [ 1199.492581][T13153] do_SYSENTER_32+0x1b/0x20 [ 1199.497127][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1199.503605][T13153] [ 1199.505939][T13153] Local variable msg_sys created at: [ 1199.511227][T13153] do_recvmmsg+0xbb/0x2120 [ 1199.515787][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.365325][T13153] not chained 400000 origins [ 1200.369976][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1200.378774][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.388851][T13153] Call Trace: [ 1200.392144][T13153] [ 1200.395085][T13153] dump_stack_lvl+0x1ff/0x28e [ 1200.399827][T13153] dump_stack+0x25/0x28 [ 1200.404025][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1200.409796][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1200.415913][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.421074][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1200.426940][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1200.432532][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.437692][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1200.443553][T13153] ? should_fail+0x75/0x9c0 [ 1200.448102][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.453259][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1200.459552][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1200.465671][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.470828][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1200.476787][T13153] __msan_chain_origin+0xbf/0x140 [ 1200.481855][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.487024][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.492008][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1200.496916][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.501488][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.506658][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1200.512952][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1200.518111][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1200.524410][T13153] ? fput+0x82/0x320 [ 1200.528352][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.534912][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.539651][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.546124][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.551204][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.556106][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.560657][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.567035][T13153] RIP: 0023:0xf6e75549 [ 1200.571127][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1200.590780][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1200.599231][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1200.607230][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1200.615226][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1200.623221][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1200.631212][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.639226][T13153] [ 1200.646676][T13153] Uninit was stored to memory at: [ 1200.653683][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.658946][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.664033][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.668758][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.673582][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.680090][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.685447][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.690604][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.695346][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.701737][T13153] [ 1200.704430][T13153] Uninit was stored to memory at: [ 1200.709508][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.714767][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.719919][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.724772][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.729497][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.736149][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.741256][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.746258][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.750899][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.757384][T13153] [ 1200.759727][T13153] Uninit was stored to memory at: [ 1200.764888][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.770042][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.775120][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.779669][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.784502][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.790989][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.796167][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.801078][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.805716][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.812202][T13153] [ 1200.814533][T13153] Uninit was stored to memory at: [ 1200.819614][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.824958][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.829937][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.834591][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.839314][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.845798][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.850876][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.855966][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.860518][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.867171][T13153] [ 1200.869500][T13153] Uninit was stored to memory at: [ 1200.874666][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.879812][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.884891][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.889444][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.894267][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.900657][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.905842][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.910741][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.915377][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.921862][T13153] [ 1200.924195][T13153] Uninit was stored to memory at: [ 1200.929274][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.934538][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.939600][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.944250][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1200.948974][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1200.955457][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1200.960530][T13153] do_fast_syscall_32+0x34/0x70 [ 1200.965531][T13153] do_SYSENTER_32+0x1b/0x20 [ 1200.970076][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1200.976563][T13153] [ 1200.978894][T13153] Uninit was stored to memory at: [ 1200.984141][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1200.989351][T13153] get_compat_msghdr+0x108/0x2c0 [ 1200.994436][T13153] do_recvmmsg+0xd77/0x2120 [ 1200.998986][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1201.003806][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1201.010182][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1201.015362][T13153] do_fast_syscall_32+0x34/0x70 [ 1201.020277][T13153] do_SYSENTER_32+0x1b/0x20 [ 1201.024930][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1201.031396][T13153] [ 1201.033836][T13153] Local variable msg_sys created at: [ 1201.039154][T13153] do_recvmmsg+0xbb/0x2120 [ 1201.043758][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1201.841222][T13153] not chained 410000 origins [ 1201.846109][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1201.854919][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.865007][T13153] Call Trace: [ 1201.868307][T13153] [ 1201.871257][T13153] dump_stack_lvl+0x1ff/0x28e [ 1201.875995][T13153] dump_stack+0x25/0x28 [ 1201.880197][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1201.886145][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1201.892345][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.897506][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1201.903370][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1201.908965][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.914125][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1201.920075][T13153] ? should_fail+0x75/0x9c0 [ 1201.924630][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.929788][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1201.936082][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1201.942204][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.947363][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1201.953224][T13153] __msan_chain_origin+0xbf/0x140 [ 1201.958294][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1201.963469][T13153] get_compat_msghdr+0x108/0x2c0 [ 1201.968657][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1201.973616][T13153] do_recvmmsg+0xd77/0x2120 [ 1201.978206][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.983671][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1201.989966][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1201.995133][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1202.001439][T13153] ? fput+0x82/0x320 [ 1202.005389][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.011946][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.016780][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.023250][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.028331][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.033240][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.037785][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.044161][T13153] RIP: 0023:0xf6e75549 [ 1202.048250][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1202.067991][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1202.076441][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1202.084444][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1202.092434][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1202.100429][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1202.108420][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1202.116423][T13153] [ 1202.122059][T13153] Uninit was stored to memory at: [ 1202.127145][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.132755][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.137730][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.142392][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.147110][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.153608][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.158791][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.163809][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.168541][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.175040][T13153] [ 1202.177371][T13153] Uninit was stored to memory at: [ 1202.182555][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.187704][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.192785][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.197359][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.202182][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.208561][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.213767][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.218665][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.223314][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.229697][T13153] [ 1202.232131][T13153] Uninit was stored to memory at: [ 1202.237213][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.242469][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.247441][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.252097][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.256821][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.263300][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.268376][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.273378][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.277934][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.284440][T13153] [ 1202.286776][T13153] Uninit was stored to memory at: [ 1202.291981][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.297134][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.302218][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.306766][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.311487][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.317972][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.323128][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.328023][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.332670][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.339049][T13153] [ 1202.341375][T13153] Uninit was stored to memory at: [ 1202.346575][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.351725][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.356783][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.361329][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.366152][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.372607][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.377680][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.382678][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.387224][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.393698][T13153] [ 1202.396026][T13153] Uninit was stored to memory at: [ 1202.401106][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.406369][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.411348][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.415999][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.420723][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.427195][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.432356][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.437252][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.441903][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.448282][T13153] [ 1202.450613][T13153] Uninit was stored to memory at: [ 1202.455794][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1202.460944][T13153] get_compat_msghdr+0x108/0x2c0 [ 1202.466036][T13153] do_recvmmsg+0xd77/0x2120 [ 1202.470590][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1202.475581][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1202.482054][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1202.487126][T13153] do_fast_syscall_32+0x34/0x70 [ 1202.492119][T13153] do_SYSENTER_32+0x1b/0x20 [ 1202.496667][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1202.503146][T13153] [ 1202.505477][T13153] Local variable msg_sys created at: [ 1202.510764][T13153] do_recvmmsg+0xbb/0x2120 [ 1202.515322][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.046612][T13153] not chained 420000 origins [ 1203.051374][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1203.060175][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.070255][T13153] Call Trace: [ 1203.073549][T13153] [ 1203.076491][T13153] dump_stack_lvl+0x1ff/0x28e [ 1203.081229][T13153] dump_stack+0x25/0x28 [ 1203.085427][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1203.091195][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1203.097314][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.102472][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1203.108345][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1203.113957][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.119138][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1203.125017][T13153] ? should_fail+0x75/0x9c0 [ 1203.129563][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.134728][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1203.141066][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1203.147188][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.152347][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1203.158209][T13153] __msan_chain_origin+0xbf/0x140 [ 1203.163283][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.168460][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.173450][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1203.178355][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.183020][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.188192][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1203.194486][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1203.199645][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1203.205938][T13153] ? fput+0x82/0x320 [ 1203.209876][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.216432][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.221179][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.227587][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.232842][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.237834][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.242403][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.248798][T13153] RIP: 0023:0xf6e75549 [ 1203.252890][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1203.272543][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1203.281005][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1203.289013][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1203.297008][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1203.305003][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1203.312998][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1203.321007][T13153] [ 1203.326898][T13153] Uninit was stored to memory at: [ 1203.332339][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.337494][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.342579][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.347130][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.351969][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.358350][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.363538][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.368438][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.373092][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.379470][T13153] [ 1203.381902][T13153] Uninit was stored to memory at: [ 1203.386980][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.392252][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.397231][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.401889][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.406627][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.413099][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.418171][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.423166][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.427715][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.434204][T13153] [ 1203.436540][T13153] Uninit was stored to memory at: [ 1203.441617][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.446870][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.451926][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.456474][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.461555][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.468050][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.473210][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.478108][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.482764][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.490534][T13153] [ 1203.492977][T13153] Uninit was stored to memory at: [ 1203.498061][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.503341][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.508345][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.513044][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.517789][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.524300][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.529390][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.534402][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.538963][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.545449][T13153] [ 1203.547794][T13153] Uninit was stored to memory at: [ 1203.552982][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.558140][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.563219][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.567771][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.572595][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.579057][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.585447][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.590345][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.594994][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.601466][T13153] [ 1203.603906][T13153] Uninit was stored to memory at: [ 1203.608986][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.614233][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.619207][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.623864][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.628585][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.635058][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.640129][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.645121][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.649666][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.656144][T13153] [ 1203.658476][T13153] Uninit was stored to memory at: [ 1203.663640][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1203.668787][T13153] get_compat_msghdr+0x108/0x2c0 [ 1203.673865][T13153] do_recvmmsg+0xd77/0x2120 [ 1203.678410][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1203.683233][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1203.689602][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1203.694771][T13153] do_fast_syscall_32+0x34/0x70 [ 1203.699671][T13153] do_SYSENTER_32+0x1b/0x20 [ 1203.704325][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1203.710791][T13153] [ 1203.713223][T13153] Local variable msg_sys created at: [ 1203.718511][T13153] do_recvmmsg+0xbb/0x2120 [ 1203.723073][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.361477][T13153] not chained 430000 origins [ 1204.366392][T13153] CPU: 0 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1204.375201][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.385285][T13153] Call Trace: [ 1204.388586][T13153] [ 1204.391530][T13153] dump_stack_lvl+0x1ff/0x28e [ 1204.396270][T13153] dump_stack+0x25/0x28 [ 1204.400478][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1204.406252][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1204.412376][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.417536][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1204.423397][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1204.428987][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.434144][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1204.440007][T13153] ? should_fail+0x75/0x9c0 [ 1204.444551][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.449705][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1204.456000][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1204.462127][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.467304][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1204.473174][T13153] __msan_chain_origin+0xbf/0x140 [ 1204.478262][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.483462][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.488465][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1204.493379][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.497960][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.503137][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1204.509432][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1204.514594][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1204.520906][T13153] ? fput+0x82/0x320 [ 1204.524846][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.531662][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.536405][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.542792][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.547876][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.552781][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.557344][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.563725][T13153] RIP: 0023:0xf6e75549 [ 1204.567817][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1204.587481][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1204.595965][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1204.603967][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1204.611968][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1204.619965][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1204.627963][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1204.635980][T13153] [ 1204.642903][T13153] Uninit was stored to memory at: [ 1204.648014][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.658707][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.664103][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.668667][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.673515][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.679910][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.685093][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.689990][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.694649][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.701031][T13153] [ 1204.703466][T13153] Uninit was stored to memory at: [ 1204.708547][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.713843][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.719151][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.723814][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.728539][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.735020][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.740100][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.745103][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.749663][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.756154][T13153] [ 1204.758483][T13153] Uninit was stored to memory at: [ 1204.763650][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.768805][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.773893][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.778444][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.783275][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.789651][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.794830][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.799734][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.804387][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.810770][T13153] [ 1204.813203][T13153] Uninit was stored to memory at: [ 1204.818288][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.823601][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.828583][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.833237][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.837962][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.844443][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.849516][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.854517][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.859063][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.865541][T13153] [ 1204.867874][T13153] Uninit was stored to memory at: [ 1204.873056][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.878205][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.883280][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.887842][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.892674][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.899049][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.904218][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.909123][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.913775][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.920162][T13153] [ 1204.922587][T13153] Uninit was stored to memory at: [ 1204.927671][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.932920][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.937901][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.942550][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1204.947280][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1204.953755][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1204.958835][T13153] do_fast_syscall_32+0x34/0x70 [ 1204.963837][T13153] do_SYSENTER_32+0x1b/0x20 [ 1204.968519][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1204.975020][T13153] [ 1204.977348][T13153] Uninit was stored to memory at: [ 1204.982530][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1204.987684][T13153] get_compat_msghdr+0x108/0x2c0 [ 1204.992778][T13153] do_recvmmsg+0xd77/0x2120 [ 1204.997331][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1205.002146][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1205.007724][ T5724] usb 2-1: USB disconnect, device number 34 00:20:05 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000400)='ramfs\x00', 0x0, &(0x7f0000000480)='ramfs\x00', 0x0]) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1}) unshare(0x40600) ftruncate(r0, 0x0) fchmod(r0, 0x0) 00:20:05 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x402c582b, &(0x7f0000000680)={'batadv_slave_1\x00'}) [ 1205.008518][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1205.008574][T13153] do_fast_syscall_32+0x34/0x70 [ 1205.008624][T13153] do_SYSENTER_32+0x1b/0x20 [ 1205.008672][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1205.008729][T13153] [ 1205.008737][T13153] Local variable msg_sys created at: [ 1205.008752][T13153] do_recvmmsg+0xbb/0x2120 [ 1205.047813][T13153] __sys_recvmmsg+0x51c/0x6f0 00:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0180000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), 0x4) 00:20:05 executing program 1: setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) setgroups(0x2, &(0x7f0000002300)=[0xee01, 0x0]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f000016b000/0x1000)=nil) 00:20:05 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) dup(r0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffff801, 0x40, @private1, @remote, 0x7800, 0x1, 0x4, 0x8000}}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x2029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0x460c6}}}) 00:20:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4, 0x32}}}]}, 0x34}}, 0x0) 00:20:05 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x402c582b, &(0x7f0000000680)={'batadv_slave_1\x00'}) 00:20:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4004) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40001) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) [ 1206.647479][T13153] not chained 440000 origins [ 1206.652645][T13153] CPU: 1 PID: 13153 Comm: syz-executor.2 Not tainted 5.16.0-rc5-syzkaller #0 [ 1206.661632][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.671993][T13153] Call Trace: [ 1206.675289][T13153] [ 1206.678233][T13153] dump_stack_lvl+0x1ff/0x28e [ 1206.682971][T13153] dump_stack+0x25/0x28 [ 1206.687170][T13153] kmsan_internal_chain_origin+0x78/0x110 [ 1206.692967][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1206.699084][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.704244][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1206.710456][T13153] ? __unix_dgram_recvmsg+0x1a0b/0x1c20 [ 1206.716049][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.721297][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1206.727157][T13153] ? should_fail+0x75/0x9c0 [ 1206.731707][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.736864][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1206.743165][T13153] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1206.749284][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.754446][T13153] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1206.760309][T13153] __msan_chain_origin+0xbf/0x140 [ 1206.765382][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1206.770644][T13153] get_compat_msghdr+0x108/0x2c0 [ 1206.775628][T13153] ? __sys_recvmmsg+0x51c/0x6f0 [ 1206.780532][T13153] do_recvmmsg+0xd77/0x2120 [ 1206.785102][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.790358][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1206.796650][T13153] ? kmsan_get_metadata+0x33/0x220 [ 1206.801810][T13153] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1206.808114][T13153] ? fput+0x82/0x320 [ 1206.812056][T13153] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1206.818622][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1206.823369][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1206.829753][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1206.834839][T13153] do_fast_syscall_32+0x34/0x70 [ 1206.839746][T13153] do_SYSENTER_32+0x1b/0x20 [ 1206.844304][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.850682][T13153] RIP: 0023:0xf6e75549 [ 1206.854772][T13153] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1206.874425][T13153] RSP: 002b:00000000f584e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1206.882885][T13153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1206.890990][T13153] RDX: 000000000001012f RSI: 0000000000000002 RDI: 0000000000000000 [ 1206.898986][T13153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1206.906984][T13153] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1206.914981][T13153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1206.922990][T13153] [ 1206.932254][T13153] Uninit was stored to memory at: [ 1206.937359][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1206.943480][T13153] get_compat_msghdr+0x108/0x2c0 [ 1206.948478][T13153] do_recvmmsg+0xd77/0x2120 [ 1206.953142][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1206.957884][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1206.964366][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1206.969450][T13153] do_fast_syscall_32+0x34/0x70 [ 1206.974446][T13153] do_SYSENTER_32+0x1b/0x20 [ 1206.979001][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1206.985474][T13153] [ 1206.987814][T13153] Uninit was stored to memory at: [ 1206.992987][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1206.998140][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.003204][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.007761][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.012571][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.018958][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.024113][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.029011][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.033640][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.040022][T13153] [ 1207.042454][T13153] Uninit was stored to memory at: [ 1207.047535][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1207.052782][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.057757][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.062385][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.067110][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.073560][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.078636][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.083610][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.088157][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.094619][T13153] [ 1207.096952][T13153] Uninit was stored to memory at: [ 1207.102112][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1207.107261][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.112315][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.116864][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.121594][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.128048][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.133203][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.138099][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.142747][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.149141][T13153] [ 1207.151478][T13153] Uninit was stored to memory at: [ 1207.156652][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1207.162034][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.167042][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.171596][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.176427][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.182886][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.187964][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.192938][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.197485][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.204037][T13153] [ 1207.206371][T13153] Uninit was stored to memory at: [ 1207.211460][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1207.216692][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.221674][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.226301][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.231025][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.237490][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.242649][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.247554][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.252193][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.258572][T13153] [ 1207.260899][T13153] Uninit was stored to memory at: [ 1207.266060][T13153] __get_compat_msghdr+0x6e1/0x9d0 [ 1207.271217][T13153] get_compat_msghdr+0x108/0x2c0 [ 1207.276311][T13153] do_recvmmsg+0xd77/0x2120 [ 1207.280985][T13153] __sys_recvmmsg+0x51c/0x6f0 [ 1207.285824][T13153] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1207.292286][T13153] __do_fast_syscall_32+0x96/0xf0 [ 1207.297373][T13153] do_fast_syscall_32+0x34/0x70 [ 1207.302417][T13153] do_SYSENTER_32+0x1b/0x20 [ 1207.306964][T13153] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1207.313431][T13153] [ 1207.315766][T13153] Local variable msg_sys created at: [ 1207.321056][T13153] do_recvmmsg+0xbb/0x2120 [ 1207.325601][T13153] __sys_recvmmsg+0x51c/0x6f0 00:20:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x0, 0x0, 0x0, 0x24, 0x1}, 0x48) 00:20:08 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="fc00000018000702ab092500090007000a0600000000000600003693210001000a0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 00:20:08 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x402c582b, &(0x7f0000000680)={'batadv_slave_1\x00'}) 00:20:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4004) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40001) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) [ 1208.791190][T13191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1208.798597][T13191] IPv6: NLM_F_CREATE should be set when creating new route [ 1208.806064][T13191] IPv6: NLM_F_CREATE should be set when creating new route 00:20:10 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x402c582b, &(0x7f0000000680)={'batadv_slave_1\x00'}) 00:20:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) dup(r0) r1 = socket(0x0, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffff801, 0x40, @private1, @remote, 0x7800, 0x1, 0x4, 0x8000}}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x2029}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0x460c6}}}) 00:20:10 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 00:20:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764362ae28e0207002000000703a08b7989080594e5d04e0d44180511b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:20:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4004) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40001) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 00:20:10 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x0, [], 0x6}) [ 1210.237971][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:20:10 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x7}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 00:20:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000280)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:20:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/4096, 0x48, 0x1000, 0x1}, 0x20) 00:20:10 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) [ 1210.983490][T13222] geneve0 speed is unknown, defaulting to 1000 00:20:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4004) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40001) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 00:20:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600e8ffffffffffffff000080", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 00:20:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xf0ff7f}}, 0x0) 00:20:11 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) [ 1211.406897][T13229] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:20:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) 00:20:11 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000027d00010cc0302000100526549734572334673", 0x3d, 0x2000}, {0x0, 0x0, 0x3d96000}], 0x2208413, &(0x7f0000000580)=ANY=[]) 00:20:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 00:20:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) poll(&(0x7f00000002c0)=[{r2}, {r0}], 0x2, 0xffff) [ 1211.848788][T13241] loop5: detected capacity change from 0 to 252256 [ 1211.933233][T13241] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1211.969265][T13241] REISERFS (device loop5): using ordered data mode [ 1211.976341][T13241] reiserfs: using flush barriers [ 1212.002614][T13241] REISERFS warning (device loop5): sh-460 journal_init: journal header magic 0 (device loop5) does not match to magic found in super block 384d5673 [ 1212.102655][T13247] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1212.422681][ T5724] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1212.812308][ T5724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.993033][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1213.002391][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.010537][ T5724] usb 1-1: Product: syz [ 1213.014976][ T5724] usb 1-1: Manufacturer: syz [ 1213.019694][ T5724] usb 1-1: SerialNumber: syz 00:20:13 executing program 5: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902870003010000000904000000010100000a2401000000020102032402000000000000000000090401000001020000090401010101020000072401000000000905010900000000000725010000000009040200000102000009040201", @ANYRES16], 0x0) 00:20:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="2ee69433ce4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:13 executing program 4: keyctl$reject(0x13, 0x0, 0x0, 0x3, 0x0) 00:20:13 executing program 3: openat$nvram(0xffffff9c, &(0x7f0000000100), 0x80440, 0x0) 00:20:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r2, 0x0, 0xffffdffa) signalfd(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 00:20:13 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0xb0, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}}, 0x50) 00:20:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000004000000007fffffff850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x19, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:20:14 executing program 3: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8991, 0x0) [ 1214.079896][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1214.086314][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1214.093111][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1214.120955][T13264] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1214.193486][ T5724] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1214.200075][ T5724] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1214.208418][ T5724] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1214.258046][ T5220] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1214.447048][ T5724] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1214.460340][ T5724] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 00:20:14 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0) [ 1214.752179][ T5724] usb 1-1: USB disconnect, device number 33 [ 1214.760272][ T5724] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 00:20:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) [ 1215.159691][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.167444][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.175146][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.182857][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.190338][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.199148][T13264] hsr0 speed is unknown, defaulting to 1000 [ 1215.208966][T13264] hsr0 speed is unknown, defaulting to 1000 00:20:15 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') poll(&(0x7f0000000380)=[{r0}], 0x1, 0x0) [ 1215.422044][ T5220] usb 6-1: Using ep0 maxpacket: 16 00:20:15 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0xb0, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}}, 0x50) [ 1215.542792][ T5220] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1215.551636][ T5220] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.562168][ T5220] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1215.571259][ T5220] usb 6-1: config 1 has no interface number 1 [ 1215.577551][ T5220] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1215.590955][ T5220] usb 6-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1215.602025][ T5220] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 00:20:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) 00:20:16 executing program 2: setreuid(0x0, 0xee01) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) 00:20:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:20:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) [ 1216.565984][ T24] audit: type=1800 audit(1216.613:244): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=1175 res=0 errno=0 [ 1216.585992][ T24] audit: type=1800 audit(1216.623:245): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1175 res=0 errno=0 [ 1216.732603][ T5220] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1216.743662][ T5220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.944062][ T5220] usb 6-1: can't set config #1, error -71 [ 1216.957346][ T5220] usb 6-1: USB disconnect, device number 24 00:20:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x20) 00:20:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0xb0, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}}, 0x50) 00:20:19 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 00:20:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) 00:20:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x3}]}}}}}}}}, 0x0) 00:20:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) 00:20:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0xb0, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}}, 0x50) 00:20:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0xa, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) 00:20:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) 00:20:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001f80)=@newtaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x8c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="57ac1df12b19"}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="a6d5c7a5595e"}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000104c}, 0x0) 00:20:20 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) 00:20:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xfffffffffffffff8, 0xff) syz_open_procfs(0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) 00:20:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0xfff, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000140)={r5}) 00:20:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x3, 0x2, 0x4, 0x0, 0x1, ' '}, 0xa, 0x0) 00:20:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x80, 0x0, &(0x7f0000000000)=0x700) 00:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001f80)=@newtaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x8c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="57ac1df12b19"}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="a6d5c7a5595e"}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000104c}, 0x0) 00:20:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x5601, &(0x7f0000000080)) 00:20:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x83, &(0x7f00000002c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x2}, "b9c4dffe429e615089a9d3c5aea47d81bd2aab03ca0100000012c80cf2a849084709ff6c1cc76e40d37bdb06d3c85730cb4d4ddcf0694f9ec0aaa85dc5"}}}}}}}, 0x0) 00:20:20 executing program 5: unshare(0x60400) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, 0x0) 00:20:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001f80)=@newtaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x8c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="57ac1df12b19"}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="a6d5c7a5595e"}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000104c}, 0x0) 00:20:21 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="83", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r1, r0, r1}, &(0x7f0000000540)=""/192, 0xc0, &(0x7f0000000100)={&(0x7f0000000140)={'blake2b-160-generic\x00'}}) 00:20:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001f80)=@newtaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x8c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="57ac1df12b19"}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @random="a6d5c7a5595e"}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000104c}, 0x0) 00:20:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x70}}, 0x0) 00:20:22 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) read(r0, &(0x7f00000003c0)=""/249, 0xf9) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x24, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00000000", 0x30}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/30, 0x1e, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c640000", 0x47f, 0xc00}, {&(0x7f0000010b00)="00000000000400"/21, 0x15, 0x1800}, {&(0x7f0000010c00), 0x0, 0x1c00}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f703200"/54, 0x36, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/31, 0x1f, 0x5400}, {&(0x7f0000011e00)="0500"/16, 0x10, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/90, 0x5a, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/21, 0x15, 0x6800}, {0x0, 0x0, 0x6c00}, {&(0x7f0000012400)="0500"/30, 0x1e, 0x7000}, {&(0x7f0000012500)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000", 0x2f, 0x7400}, {&(0x7f0000012600)="0200"/31, 0x1f, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c6530000000", 0x28, 0x7c00}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr', 0x1d, 0x83e0}, {0x0, 0x0, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af30100040000000000000000000000010000000400", 0x3e, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af3010004", 0x2d, 0x9100}, {&(0x7f0000012e00)="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"/732, 0x2dc, 0x9180}, {&(0x7f0000013100)}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6d}], 0x0, &(0x7f0000013800)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r4, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000013800)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(0x0, &(0x7f0000000040), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001540)={{}, {}, [{0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {0x2, 0x6}, {0x2, 0x5}], {0x4, 0x3}, [{0x8, 0x0, 0xffffffffffffffff}, {}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x4}}, 0x74, 0x1) fchownat(r5, 0x0, r6, 0x0, 0x1000) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)={0xe9, 0x0, 0x0, [{{0x0, 0x80000001, 0x0, 0x0, 0x1, 0x3f, {0x4, 0x35db, 0x0, 0x400, 0xfffffffffffffff7, 0x80, 0x1, 0xfff, 0x0, 0x4000, 0x200, 0x0, 0x0, 0x3, 0x2}}, {0x3, 0x5, 0x9, 0x7, '!(.,#(\xf7U]'}}, {{0x2, 0x3, 0x3ff, 0x8, 0xadb, 0x0, {0x0, 0x80000000, 0x9, 0x2, 0x3f, 0x4ec1, 0x5, 0xdf91, 0xffffffff, 0x6000, 0x4, 0xee00, 0x0, 0x7ff, 0xfffffffa}}, {0x4, 0x0, 0x1, 0x40, '!'}}, {{0x0, 0x3, 0xa86, 0x7, 0x6, 0x429, {0x3, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x17e0, 0xf24, 0xa000, 0x1, 0xffffffffffffffff, 0xee01, 0x81}}, {0x5, 0x3fe, 0xc, 0x17af0ff7, '/dev/ashmem\x00'}}]}, 0x200) 00:20:22 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb0000001}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 00:20:22 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="83", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r1, r0, r1}, &(0x7f0000000540)=""/192, 0xc0, &(0x7f0000000100)={&(0x7f0000000140)={'blake2b-160-generic\x00'}}) 00:20:22 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9db0}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/171, 0x7, 0xab, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', r1, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x400, 0x3f}, 0x10}, 0x80) signalfd(r0, &(0x7f0000000180)={[0x3, 0x2]}, 0x8) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='exfat\x00', 0x0, &(0x7f0000000600)='/dev/vcs\x00') r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000440)='btrfs_set_extent_bit\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) write$binfmt_script(r0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x102e) 00:20:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xfffffffffffffff8, 0xff) syz_open_procfs(0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) 00:20:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000008cc0)={0x0, 0x0, &(0x7f0000008c80)={&(0x7f0000001400)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0xa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}]}, 0x38}}, 0x0) [ 1222.289279][T13340] loop4: detected capacity change from 0 to 512 00:20:22 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="83", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r1, r0, r1}, &(0x7f0000000540)=""/192, 0xc0, &(0x7f0000000100)={&(0x7f0000000140)={'blake2b-160-generic\x00'}}) 00:20:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5}, [@FRA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) [ 1222.511406][T13340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:20:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) [ 1222.636036][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:20:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xfffffffffffffff8, 0xff) syz_open_procfs(0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) [ 1222.718674][T13355] blktrace: Concurrent blktraces are not allowed on sg0 00:20:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x121, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x8001}}}}, 0x30}}, 0x0) 00:20:22 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9db0}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/171, 0x7, 0xab, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', r1, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x400, 0x3f}, 0x10}, 0x80) signalfd(r0, &(0x7f0000000180)={[0x3, 0x2]}, 0x8) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='exfat\x00', 0x0, &(0x7f0000000600)='/dev/vcs\x00') r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000440)='btrfs_set_extent_bit\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) write$binfmt_script(r0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x102e) 00:20:22 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="83", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r1, r0, r1}, &(0x7f0000000540)=""/192, 0xc0, &(0x7f0000000100)={&(0x7f0000000140)={'blake2b-160-generic\x00'}}) [ 1223.090086][ T24] audit: type=1326 audit(1223.143:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13359 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6f04549 code=0x7ffc0000 [ 1223.131710][T13363] blktrace: Concurrent blktraces are not allowed on sg0 [ 1223.222627][ T24] audit: type=1326 audit(1223.213:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13359 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6f04549 code=0x7ffc0000 [ 1223.245250][ T24] audit: type=1326 audit(1223.213:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13359 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6f04549 code=0x7ffc0000 00:20:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4}}}]}, 0x48}}, 0x0) 00:20:23 executing program 5: mmap$perf(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x7a3}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x386}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000280)=""/27, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 00:20:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0xfffffffffffffff8, 0xff) syz_open_procfs(0x0, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x800, 0x60c, 0x0, 0x0, 0xffffffffffffffff}) 00:20:23 executing program 3: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) 00:20:23 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mknodat(r0, &(0x7f0000000140)='./file1/file0\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 00:20:23 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9db0}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/171, 0x7, 0xab, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', r1, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x400, 0x3f}, 0x10}, 0x80) signalfd(r0, &(0x7f0000000180)={[0x3, 0x2]}, 0x8) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='exfat\x00', 0x0, &(0x7f0000000600)='/dev/vcs\x00') r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000440)='btrfs_set_extent_bit\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) write$binfmt_script(r0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x102e) 00:20:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0x0, 0x378, 0x290, 0x290, 0x290, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private2, 0x32, 0x1d}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@ipv6={@remote, @mcast1, [], [], 'bond_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@loopback, @ipv4, [], [], 'ip6gre0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@hl={{0x24}}, @inet=@rpfilter={{0x24}}]}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5ac) [ 1223.904900][T13377] blktrace: Concurrent blktraces are not allowed on sg0 00:20:24 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3b) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="54a2e72c79ee0e93fdacdfc36de4", 0x0, 0x63b}, 0x28) 00:20:24 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) io_setup(0x7d0, &(0x7f0000000080)=0x0) io_submit(r1, 0x7821, &(0x7f0000000540)=[&(0x7f00000000c0)={0xfff0, 0x60, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x13900}]) 00:20:24 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa0c2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0xfffffffffffffffe) 00:20:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x20, 0x9, 0x0, 0x6, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x200}, 0x0, 0x1, 0x200, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xd3, 0x5c, 0xe5, 0x0, 0xdc82, 0x21514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4, 0x0, @perf_config_ext={0x0, 0x2}, 0x4410, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000007c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv(Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2;\xad\x94\x96\xacSo\\\x0e\xfb\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xc2P\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6\x18u\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\xa6I\xfe\x01\xe3-\xe8\xbd\xfd\x1bk\x94/\x1e\xb8\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9\x9bh\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/A\x90\x9e\xa3Z\x02\f\xcb\xed\xb2\x8b\xe1\xb9U\x11\xf0s\xdb\x10\xdc\x03\xd2\x9b\x1f\xd6\x8a\xb8zo\xd2\x99\xd5\x84\xf7\x1a\x92K\xbfg\x87\xf4\x8e\xf7*\xb8.\xbe\xaes\x11\xc6\x93\x87\x14\xe0\xec\xc6\xbci\xbb}\xe3\xd2N\xbd\x95\xe1\xbb\xf9\xd8X\x15_\"\xe2`\x80\xa3\xe8\xd2\x8f\xa3\xcf\x1b\x02\xb0\xe9\xd1\x13C$\x1dit\xfff9?\'\xce\x1c\x19(=\x8f\x1bdR\x19\xc1\xdbdi=\xe6\xb1rs\xfc\xa4^9y>\x19k\xd3\x154\xe4\n\xffF\x0f\xca\x1dI\x15\xb8\xb2\x18:p\xad\xa68q\x00\x00\x00\x00') [ 1224.350899][T13385] xt_TPROXY: Can be used only with -p tcp or -p udp 00:20:24 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9db0}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/171, 0x7, 0xab, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', r1, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x400, 0x3f}, 0x10}, 0x80) signalfd(r0, &(0x7f0000000180)={[0x3, 0x2]}, 0x8) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='exfat\x00', 0x0, &(0x7f0000000600)='/dev/vcs\x00') r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00004, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000440)='btrfs_set_extent_bit\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000072"], 0x0) write$binfmt_script(r0, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x102e) 00:20:24 executing program 0: socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x2, 0x1ba, 0x0, 0x3, 0xc6, 0x8, 0xab}, 0x9c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000000140)=ANY=[]}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @IFLA_VTI_REMOTE={0x8}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x48}}, 0x0) 00:20:24 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3b) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="54a2e72c79ee0e93fdacdfc36de4", 0x0, 0x63b}, 0x28) 00:20:24 executing program 1: sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x90f2, 0x1, 0x5, 0xfffffffffffffff8, 0x100000001, 0x0, 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) signalfd(r0, &(0x7f0000000040)={[0x1ff]}, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000}, 0x0) sched_setattr(r3, 0x0, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x6, 0xc, 0x3ff, 0x4, 0x1e4e, 0x3, 0x6, 0x1, 0x3}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001200034700bb65e1c3e4ffff0100000001000000560000002500000019000a00", 0x24}], 0x1) [ 1224.753194][ T5220] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1225.002295][ T5220] usb 4-1: Using ep0 maxpacket: 8 [ 1225.122849][ T5220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.143333][ T5220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.153932][ T5220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1225.165039][ T5220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.522524][ T5220] usb 4-1: string descriptor 0 read error: -71 [ 1226.529232][ T5220] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.40 [ 1226.538669][ T5220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:20:26 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) 00:20:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x4c}}, 0x0) [ 1226.798621][ T5220] usb 4-1: can't set config #1, error -71 [ 1226.876426][ T5220] usb 4-1: USB disconnect, device number 29 00:20:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3b) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="54a2e72c79ee0e93fdacdfc36de4", 0x0, 0x63b}, 0x28) 00:20:27 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000dc0)=0xffffffffffffffff, 0x12) 00:20:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x20, 0x9, 0x0, 0x6, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x200}, 0x0, 0x1, 0x200, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xd3, 0x5c, 0xe5, 0x0, 0xdc82, 0x21514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4, 0x0, @perf_config_ext={0x0, 0x2}, 0x4410, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000007c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv(Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2;\xad\x94\x96\xacSo\\\x0e\xfb\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xc2P\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6\x18u\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\xa6I\xfe\x01\xe3-\xe8\xbd\xfd\x1bk\x94/\x1e\xb8\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9\x9bh\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/A\x90\x9e\xa3Z\x02\f\xcb\xed\xb2\x8b\xe1\xb9U\x11\xf0s\xdb\x10\xdc\x03\xd2\x9b\x1f\xd6\x8a\xb8zo\xd2\x99\xd5\x84\xf7\x1a\x92K\xbfg\x87\xf4\x8e\xf7*\xb8.\xbe\xaes\x11\xc6\x93\x87\x14\xe0\xec\xc6\xbci\xbb}\xe3\xd2N\xbd\x95\xe1\xbb\xf9\xd8X\x15_\"\xe2`\x80\xa3\xe8\xd2\x8f\xa3\xcf\x1b\x02\xb0\xe9\xd1\x13C$\x1dit\xfff9?\'\xce\x1c\x19(=\x8f\x1bdR\x19\xc1\xdbdi=\xe6\xb1rs\xfc\xa4^9y>\x19k\xd3\x154\xe4\n\xffF\x0f\xca\x1dI\x15\xb8\xb2\x18:p\xad\xa68q\x00\x00\x00\x00') 00:20:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6}, @erp={0x2a, 0x1}]}]}, 0x2c}}, 0x0) 00:20:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3b) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="54a2e72c79ee0e93fdacdfc36de4", 0x0, 0x63b}, 0x28) 00:20:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r1, 0x47) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r1, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 00:20:29 executing program 2: futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000580), 0x1f000000) 00:20:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\xdc\xd8\xa3\xfc\xad\xcf\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\f\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x1e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00he\xfdJ\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6\x18u\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\xa6I\xfe\x01\xe3-\xe8\xbd\xfd\x1bk\x94/\x1e\xb8\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9\x9bh\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/A\x90\x9e\xa3Z\x02\f\xcb\xed\xb2\x8b\xe1\xb9U\x11\xf0s\xdb\x10\xdc\x03\xd2\x9b\x1f\xd6\x8a\xb8zo\xd2\x99\xd5\x84\xf7\x1a\x92K\xbfg\x87\xf4\x8e\xf7*\xb8.\xbe\xaes\x11\xc6\x93\x87\x14\xe0\xec\xc6\xbci\xbb}\xe3\xd2N\xbd\x95\xe1\xbb\xf9\xd8X\x15_\"\xe2`\x80\xa3\xe8\xd2\x8f\xa3\xcf\x1b\x02\xb0\xe9\xd1\x13C$\x1dit\xfff9?\'\xce\x1c\x19(=\x8f\x1bdR\x19\xc1\xdbdi=\xe6\xb1rs\xfc\xa4^9y>\x19k\xd3\x154\xe4\n\xffF\x0f\xca\x1dI\x15\xb8\xb2\x18:p\xad\xa68q\x00\x00\x00\x00') 00:20:32 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x4e, 0xa9, 0x8c, 0x40, 0x1bc7, 0x1031, 0xc37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x61, 0xe2}}]}}]}}, 0x0) 00:20:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x20, 0x9, 0x0, 0x6, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x200}, 0x0, 0x1, 0x200, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xd3, 0x5c, 0xe5, 0x0, 0xdc82, 0x21514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4, 0x0, @perf_config_ext={0x0, 0x2}, 0x4410, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000007c0)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv(Qa\xf3\xd4\xfc(\x83\xfb\xf8)\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2;\xad\x94\x96\xacSo\\\x0e\xfb\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xc2P\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6\x18u\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\xa6I\xfe\x01\xe3-\xe8\xbd\xfd\x1bk\x94/\x1e\xb8\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9\x9bh\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f\xa8\x06\x88\x8e\xf4\xbc\xad\xc0M\x91rFJ\x03\xac \xb9\x0e\xb58g\xaf\x849\x9c|\xfdq6\xfb)\xc6H\x8f\xc5\xa7\x93\xfd\x89pzp\xb4\n\xbd\xb2\xb2\xa8!\xb2N\xbb3\x9co\x0e!\nD\x7f\xe7\xf8\xd8YN\xaf\x1c\xf7\xe2\xfd\xf6\x0f\x938\xbf\xfd\x0f\x97Z\x9d1\xf5\x11\xc6\xdb\f\x81uB\xd4/A\x90\x9e\xa3Z\x02\f\xcb\xed\xb2\x8b\xe1\xb9U\x11\xf0s\xdb\x10\xdc\x03\xd2\x9b\x1f\xd6\x8a\xb8zo\xd2\x99\xd5\x84\xf7\x1a\x92K\xbfg\x87\xf4\x8e\xf7*\xb8.\xbe\xaes\x11\xc6\x93\x87\x14\xe0\xec\xc6\xbci\xbb}\xe3\xd2N\xbd\x95\xe1\xbb\xf9\xd8X\x15_\"\xe2`\x80\xa3\xe8\xd2\x8f\xa3\xcf\x1b\x02\xb0\xe9\xd1\x13C$\x1dit\xfff9?\'\xce\x1c\x19(=\x8f\x1bdR\x19\xc1\xdbdi=\xe6\xb1rs\xfc\xa4^9y>\x19k\xd3\x154\xe4\n\xffF\x0f\xca\x1dI\x15\xb8\xb2\x18:p\xad\xa68q\x00\x00\x00\x00') 00:20:33 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000540)={0x5, [[0x2, 0x1f, 0x12c, 0x1, 0x0, 0x18b, 0x3, 0x7], [0x6, 0x0, 0xfff, 0x80000001, 0x0, 0x8001, 0x94, 0x1], [0x8, 0x8, 0x0, 0xcc, 0xed9d, 0x7, 0x0, 0x20]], '\x00', [{0x4, 0x9, 0x1, 0x1, 0x1}, {0x5, 0x4, 0x0, 0x1}, {0x1, 0x47, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x100000, 0x0, 0x0, 0x0, 0x1}, {0xd788, 0x10001, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x8, 0x1, 0x1}, {0x0, 0x7902, 0x1, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x1}, {0xfffff001, 0x4, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1}], '\x00', 0xf1a}) 00:20:33 executing program 2: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) perf_event_open(0x0, 0x0, 0x4, r1, 0xd) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x20800, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'veth1_vlan\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x800) 00:20:33 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000540)={0x5, [[0x2, 0x1f, 0x12c, 0x1, 0x0, 0x18b, 0x3, 0x7], [0x6, 0x0, 0xfff, 0x80000001, 0x0, 0x8001, 0x94, 0x1], [0x8, 0x8, 0x0, 0xcc, 0xed9d, 0x7, 0x0, 0x20]], '\x00', [{0x4, 0x9, 0x1, 0x1, 0x1}, {0x5, 0x4, 0x0, 0x1}, {0x1, 0x47, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x100000, 0x0, 0x0, 0x0, 0x1}, {0xd788, 0x10001, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x8, 0x1, 0x1}, {0x0, 0x7902, 0x1, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x1}, {0xfffff001, 0x4, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1}], '\x00', 0xf1a}) 00:20:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000540)={0x5, [[0x2, 0x1f, 0x12c, 0x1, 0x0, 0x18b, 0x3, 0x7], [0x6, 0x0, 0xfff, 0x80000001, 0x0, 0x8001, 0x94, 0x1], [0x8, 0x8, 0x0, 0xcc, 0xed9d, 0x7, 0x0, 0x20]], '\x00', [{0x4, 0x9, 0x1, 0x1, 0x1}, {0x5, 0x4, 0x0, 0x1}, {0x1, 0x47, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x100000, 0x0, 0x0, 0x0, 0x1}, {0xd788, 0x10001, 0x0, 0x0, 0x0, 0x1}, {0x8001, 0x8, 0x1, 0x1}, {0x0, 0x7902, 0x1, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x3, 0x1, 0x1, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x1}, {0xfffff001, 0x4, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1}], '\x00', 0xf1a}) 00:20:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006011bc40f71402005db9000000010902120901000000000904000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x5, 0x3, "824e83"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:20:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 00:20:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:35 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)={0x40000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:20:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 00:20:36 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 00:20:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xe6, &(0x7f0000000240)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:20:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 00:20:36 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000012c0), 0x1000000000000147, 0x0, 0x0) 00:20:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, 0x0, 0x5) 00:20:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x10001, 0x7, 0x41, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 00:20:36 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:36 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, ';ki', 0x18, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x7, 0xb, "67b74d20eb9a56e8f37d62"}, @pad1]}]}}}}}, 0x0) 00:20:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 00:20:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x3, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 00:20:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x8) 00:20:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3feff04", 0x2d, 0x1600}], 0x81, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:20:37 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x12) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) 00:20:37 executing program 0: io_setup(0x5, &(0x7f0000000240)=0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 00:20:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) [ 1237.599943][T13554] loop4: detected capacity change from 0 to 1024 00:20:37 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) [ 1237.695943][T13554] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1237.793789][T13554] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1237.800384][T13554] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 65534, max 4(4), depth 0(0) 00:20:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000740)=@framed={{}, [@ldst={0x6, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0xb3, &(0x7f0000000280)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1237.844145][T13554] EXT4-fs error (device loop4): ext4_quota_enable:6323: comm syz-executor.4: Bad quota inode # 3 00:20:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) shutdown(r1, 0x0) [ 1237.981295][T13554] EXT4-fs warning (device loop4): ext4_enable_quotas:6363: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 1237.996116][T13554] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1238.003126][T13554] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) 00:20:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 00:20:38 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a060a845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) 00:20:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3feff04", 0x2d, 0x1600}], 0x81, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:20:38 executing program 2: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 00:20:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0xd4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6}, 0x48) 00:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) 00:20:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x48c20002, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 1238.892634][T13578] ptrace attach of "/root/syz-executor.2 exec"[5294] was attempted by "/root/syz-executor.2 exec"[13578] [ 1238.906263][T13580] loop4: detected capacity change from 0 to 1024 00:20:39 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a060a845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) [ 1239.013836][T13580] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 00:20:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_LABEL={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 1239.073074][T13580] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1239.079694][T13580] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 65534, max 4(4), depth 0(0) [ 1239.169038][T13580] EXT4-fs error (device loop4): ext4_quota_enable:6323: comm syz-executor.4: Bad quota inode # 3 00:20:39 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 00:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) [ 1239.296989][T13593] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1239.313058][T13580] EXT4-fs warning (device loop4): ext4_enable_quotas:6363: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 1239.327603][T13580] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1239.334754][T13580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:20:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 00:20:39 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000540)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000440)={0x0, ""/208}, 0xd8, 0x1, 0x5800) 00:20:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3feff04", 0x2d, 0x1600}], 0x81, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:20:39 executing program 2: keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={'crct10dif\x00'}}) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) 00:20:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)="72263b7134448f21dd42d7f02e77b5acd8226e19640f3f58491ca861ee0083dac0ddb0e780bbc783a7029e54", 0x2c}, {0x0}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="ff0100000000000001010000080000007ee60d5563282b9fe66f120a95dace048f94d5ece10b591580b1f82f51d58cc15c180973e372b23836b859a47c7edd81b0464b58d954b31d4c3c6f67b345abe858eea785c19e5b15e9e706514e85222568741d63cdc11a1df4435fd97a80f1df7765bbd4ce1380ea3c170a1da3d38e27333f3ce12ad03acd72c813400a117b39009575a06d0cdac89d79ad195199525614c082f7b67a89ce1336f1adeff411840808a64d21000000e750ae4c7e9c22"], 0xb0}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000800)="17a088ef8896fe00db52287ae1c475b29cfe0a7009d2eaf08caa5eb55e0a49a8b96b545e3a7b6332b980d559f63a0b5114c7928a9b6bc25ab5b1efb2e7d10757d607fa4a971f5f0723f3c9fa522af8e6605e66", 0x53}, {&(0x7f0000000900)="7d23708f18d41e9e2610f9ab09a19192b30775e3989b7ec2607ede09ef14990b111406e4a0ee8020804a976a635f286b6384af1008258fd189493c68ec4387cd2137061949440bfcfc478c3c8424a3127762fedcca4760129b4fbbf1850ecf4775b84da929bb80606cd44e0348ba64261ffd16a6bab718645a3fb0767a595f77c568480ea08de6358139cc7764378d19c6a071b0904b60", 0x97}, {&(0x7f00000009c0)}, {&(0x7f0000002d40)}, {0x0}, {0x0}], 0x6, &(0x7f0000002f00)=[{0xe0, 0x29, 0x4, "623a8a1718c6d979b3bbee9bb70e1170409766be3bbb9a68de8d8f5dcbb8c5e0aee0c9ae4f8df10cdc054c45c3b9d784186c43229f9cf2c609692febab78d439332c936e3ae223e44c3c2b3aff0d3dbe0d606a554448f2f2bbe4d2348082358e3e66f78b8c36215826c625f7e2cf8d26b88b5f30e962ea64c719a07f6a37fa2a833266ed55f867581c85d5db3784a937cd86d2d7a93bbfb255befffdf8b8f658655d8aa528bb7a7ed11a321653b912583852bc194d2138961ab9bb06aa435481d9a3c00865aac890e71646d00afd"}, {0x10, 0x0, 0x2}, {0x48, 0x0, 0x3, "1b241ad1654777399183843c205928b93de53e4b428697ccdb66b5ba385824d59a6176845bd1dd37692a33dc32fa03e448"}, {0x10, 0x6}], 0x148}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000003780)="9ef33d410a6d4f1498f7d843b72ca256ec98f9c66e500d3ecd5ec741fee2fc0c5483f914c9259b1e9cd15252e54c6e18910c377e41035846c8ca9c0ad82c8a5d6152797bafbeefd7744fc3f629c99396b9d9ee9a56f68c40692f97b9c83a25de9a58d32756c1574249d060f1691b167b6c5b749871de396431c0c2013024875bb82d54ff6cd564ddb887503faac57dc392699adfee9e01404c3b4cf5824eb0c9025e09df96b3913051e94e64c241b2135dbe771450b88772da0cbe0dfaa6fa7655550cacc12c2907e3445ce6281146c2712dff26401069", 0xd7}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000058c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "b1b33f74693957"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d40)={0x0, [{}, {}, {}, {}, {r1}], 0x0, "c072d2ca815266"}) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) open(0x0, 0x40500, 0x53) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) mkdirat(r2, &(0x7f0000000240)='./file1\x00', 0x0) 00:20:39 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a060a845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) 00:20:40 executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) 00:20:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f00000000c0)={0xffffffbb}) [ 1240.115595][T13607] PKCS8: Unsupported PKCS#8 version [ 1240.137829][T13608] loop4: detected capacity change from 0 to 1024 [ 1240.283411][T13608] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 00:20:40 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x400) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x5, 0x0, 0x4) [ 1240.485941][T13608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1240.494985][T13608] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 65534, max 4(4), depth 0(0) [ 1240.542113][T13608] EXT4-fs error (device loop4): ext4_quota_enable:6323: comm syz-executor.4: Bad quota inode # 3 [ 1240.560773][T13608] EXT4-fs warning (device loop4): ext4_enable_quotas:6363: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 1240.575271][T13608] EXT4-fs (loop4): Cannot turn on quotas: error -117 00:20:40 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a060a845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) [ 1240.582490][T13608] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:20:40 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8b00000000e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5227f3", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x4, "011700", 0x0, 0x11, 0x0, @mcast1, @private2, [@hopopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 00:20:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$PIO_FONTRESET(r0, 0x8926, 0x20000000) 00:20:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3feff04", 0x2d, 0x1600}], 0x81, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1240.797972][T13611] loop5: detected capacity change from 0 to 3208 00:20:41 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x2c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}]}, 0x2c}}, 0x0) [ 1241.078043][T13611] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1241.235444][T13629] loop4: detected capacity change from 0 to 1024 00:20:41 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8b00000000e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5227f3", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x4, "011700", 0x0, 0x11, 0x0, @mcast1, @private2, [@hopopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 00:20:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='3', 0x9}, {&(0x7f0000000340)='g', 0x1}], 0x2) [ 1241.377353][T13629] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 00:20:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000d0000000000000001000cc50000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) unshare(0x40000400) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xaba}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000140)=0x54) [ 1241.470707][T13629] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1241.478275][T13629] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 65534, max 4(4), depth 0(0) 00:20:41 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8990, 0x0) [ 1241.683699][T13629] EXT4-fs error (device loop4): ext4_quota_enable:6323: comm syz-executor.4: Bad quota inode # 3 [ 1241.737458][T13636] geneve0 speed is unknown, defaulting to 1000 [ 1241.745392][T13636] hsr0 speed is unknown, defaulting to 1000 [ 1241.749544][T13629] EXT4-fs warning (device loop4): ext4_enable_quotas:6363: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 1241.765794][T13629] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1241.773333][T13629] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:20:41 executing program 0: unshare(0x40400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getsockname$packet(r0, 0x0, 0x0) 00:20:41 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8b00000000e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5227f3", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x4, "011700", 0x0, 0x11, 0x0, @mcast1, @private2, [@hopopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 00:20:42 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x79, 0xbd, 0x73, 0x20, 0x90a, 0x1200, 0x5d4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0xa1, 0x9c}}]}}]}}, 0x0) 00:20:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x101, 0x0, 0xf0, {0x0, 0xe}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}]}]}, 0x54}, 0x1, 0xe000000}, 0x0) 00:20:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b40)={{0x12, 0x1, 0x0, 0x60, 0xb2, 0x34, 0x10, 0x10c4, 0x8470, 0x3436, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x92, 0xb2, 0x66}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000000)={0x0, 0x0, 0xd, "3c4312e3d00fcb16805e4036bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:42 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8b00000000e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5227f3", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x4, "011700", 0x0, 0x11, 0x0, @mcast1, @private2, [@hopopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) [ 1242.672312][ T3567] usb 6-1: new high-speed USB device number 25 using dummy_hcd 00:20:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) 00:20:42 executing program 4: r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) [ 1242.922225][ T3567] usb 6-1: Using ep0 maxpacket: 32 00:20:43 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) 00:20:43 executing program 4: add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='user\x00', 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 1243.061063][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1243.202544][ T3567] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=5d.4b [ 1243.212070][ T3567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.220228][ T3567] usb 6-1: Product: syz [ 1243.225041][ T3567] usb 6-1: Manufacturer: syz [ 1243.229762][ T3567] usb 6-1: SerialNumber: syz 00:20:43 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/power/wakeup_count', 0x68001, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000e80), 0xa) 00:20:43 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x4, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:20:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe}}) [ 1243.400153][ T3567] usb 6-1: config 0 descriptor?? 00:20:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0x0) [ 1243.448442][ T3567] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1243.665684][ T3567] usb 6-1: USB disconnect, device number 25 00:20:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x3, 0x5]}, 0x8) 00:20:44 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d3", 0x1}], 0x1}}], 0x1, 0x0) 00:20:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="98c0dd17a573603772c9cbbfaf2cc6d87ba1ae89ff20181950928f9da0d4d2db5781ba2db07e9c30590140cfe34418066f4bdfb1b98a73f31cdda73dfe621b1ed5bf2bd9a9abd227a32bf8316a84812bf7bb7de89de248fc00ccf4b3b2a3dffe75d4bdaf370617b3ae9432dffeb4c9a2a4017269021d443c2788a0ee003021f9f7998362fa12d47b167800a12027927667925b1640d25a7366172f97d5e134db14020a4b5323cdfe5529c691dcc4a84edbadae20bedd6ed69809841793bd70e6913126f9d7966784a7430eecb5c36c259f7f51cc4b", 0xd5}, {&(0x7f0000000300)="161a4543fe78d09b36c5c238b53aedd491c31444c653385f1261d90b44e03abefa683ac351279bd2dd16ca9ae1c097de1b85939b425010f016238eec20f8f67133c317def61dc23bf082fb42247e3023a1422ea55da5bc311986f34f5d3fc9d967d20826c0d587f75871fb9f510cad74f26586ac61eb", 0x76}, {&(0x7f0000000280)="13d0ad92c85c8bd58c5dc45c2eb34e4ff9f93a3c85b509652a", 0x19}, {&(0x7f0000000540)="251847933f33fb229b7e78729748aabb0af8b43a56a91bc28e5d1fadba8271743e1514050b3e90d46b50e1ef63bf39b11d8ba36d78b54e119d6ed76e81f74065ef90116d7e49218b81e9d1a69fdbe24ea2d20ba03ee92db2921eb049a53fee4e12aa0cda5d2ac925d33f6be83ef26e4386093bb3b3b803441df2", 0x7a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000e40)="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", 0x4e3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000cc0)='|', 0x1}], 0x1}}], 0x3, 0x0) 00:20:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/power/wakeup_count', 0x68001, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000e80), 0xa) 00:20:44 executing program 2: unshare(0x2000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001040000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_rm_watch(r1, 0x0) 00:20:44 executing program 1: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000019007faf37c0f2b2a4a280930a020310000243dc900523693900090010000604000000000800050005000000080000000004d5440a009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 00:20:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/power/wakeup_count', 0x68001, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000e80), 0xa) 00:20:44 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d3", 0x1}], 0x1}}], 0x1, 0x0) 00:20:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x6}, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x5, 0x5, &(0x7f00000025c0)=[{0x0, 0x0, 0x1}, {&(0x7f0000000240), 0x0, 0x6}, {&(0x7f0000000480)="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", 0x9e8}, {&(0x7f0000001580)}, {0x0, 0x0, 0x8}], 0x0, &(0x7f00000026c0)={[], [{@seclabel}, {@fowner_lt}, {@dont_measure}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '\xd4'}}]}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) close(r3) 00:20:44 executing program 1: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000200007021dfffd946f610500810000e8fe02080100010800080018000400ff7e", 0x24}], 0x1}, 0x0) 00:20:44 executing program 2: unshare(0x2000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001040000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_rm_watch(r1, 0x0) 00:20:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x2, 0x0, @private1}, r1}}, 0x30) 00:20:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/power/wakeup_count', 0x68001, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000e80), 0xa) 00:20:45 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d3", 0x1}], 0x1}}], 0x1, 0x0) 00:20:45 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000007c0)) 00:20:45 executing program 2: unshare(0x2000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001040000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_rm_watch(r1, 0x0) 00:20:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={0x4c, 0x2, 0x6, 0x5, 0xf56, 0x0, {0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) 00:20:45 executing program 0: syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{0x0}, {0x0}], 0x0, &(0x7f0000000400)={[{@dmode={'dmode', 0x3d, 0x9}}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@partition={'partition', 0x3d, 0xfffffffffffff3cf}}, {@unhide}, {@undelete}, {@utf8}, {@partition}, {@longad}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x88-/}...@*'}}]}) 00:20:45 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="d3", 0x1}], 0x1}}], 0x1, 0x0) 00:20:45 executing program 2: unshare(0x2000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001040000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_rm_watch(r1, 0x0) 00:20:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x2, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:20:45 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 00:20:45 executing program 5: pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0) 00:20:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "62b2e099"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x0, '\a\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0x501c4814, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x100}) 00:20:46 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x6001) [ 1246.058872][T13715] binder: 13713:13715 unknown command 16456 [ 1246.065339][T13715] binder: 13713:13715 ioctl c0306201 20000400 returned -22 00:20:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f00000000c0)) 00:20:46 executing program 1: mkdir(&(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c5f182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c5fe0e0000e7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3d01000000fb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) 00:20:46 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 00:20:46 executing program 5: pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0) 00:20:46 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x6001) 00:20:46 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="0100f79011f9eec83c", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 1246.768461][ T3560] usb 1-1: new high-speed USB device number 34 using dummy_hcd 00:20:47 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 00:20:47 executing program 1: mkdir(&(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) 00:20:47 executing program 5: pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0) [ 1247.152901][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.164224][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.174602][ T3560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1247.187815][ T3560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1247.197173][ T3560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:20:47 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x6001) [ 1247.497781][ T3560] usb 1-1: config 0 descriptor?? [ 1247.977518][ T3560] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 1248.004079][ T3560] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 1248.064762][ T3560] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1248.260413][ T3560] usb 1-1: USB disconnect, device number 34 00:20:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "62b2e099"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x0, '\a\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0x501c4814, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x100}) 00:20:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2f606557d6081f8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, "0afda57a59fb575a"}) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000004c0)={"64d60617c94629a00376865d991e7f503c6b2d2bc567c68400ff2b48e6db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xfffffffd]}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xfe8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "0001227b7c00fa02060007fff7fffffffffdf0"}) 00:20:48 executing program 5: pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0) 00:20:48 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 00:20:48 executing program 1: mkdir(&(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) 00:20:48 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x6001) 00:20:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18}, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005060700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32=r4, @ANYBLOB="080002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) 00:20:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/236, 0xec) read$proc_mixer(r0, 0x0, 0x0) 00:20:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x190, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@uncond, 0x0, 0xd8, 0xfc, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00'}}, @common=@icmp={{0x24}, {0x0, 'hr'}}]}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x34c) 00:20:49 executing program 4: syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="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", 0x400}], 0x2008400, &(0x7f0000000900)=ANY=[]) 00:20:49 executing program 1: mkdir(&(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c5f182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c5fe0e0000e7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3d01000000fb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0x80086601, 0x0) [ 1249.372772][ T3567] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1249.383996][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.403419][T13767] loop4: detected capacity change from 0 to 2 00:20:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000900)="255bb5") [ 1249.733145][ T3567] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.745262][ T3567] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.755498][ T3567] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1249.768702][ T3567] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1249.778025][ T3567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.802593][T13769] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1249.836534][ T3567] usb 1-1: config 0 descriptor?? [ 1250.316531][ T3567] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 1250.327119][ T3567] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 1250.348035][ T3567] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1250.603250][ T3567] usb 1-1: USB disconnect, device number 35 00:20:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "62b2e099"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x0, '\a\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0x501c4814, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x100}) 00:20:51 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000008640)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:20:51 executing program 3: syz_io_uring_setup(0x3d8f, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 00:20:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_setup(0xb, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x10000007ffff000}]) 00:20:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fb3J']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) 00:20:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000015, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 00:20:51 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=5,mode=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, &(0x7f0000000280)) 00:20:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001e00)={0x84, &(0x7f0000001980)={0x0, 0x0, 0xd, "e7df098a69b3cbf8010b53c406"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$inet6(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x200000d0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) 00:20:51 executing program 1: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x10, 0x572, 0xcb01, 0x97f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x63, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x58, @string={0x58, 0x3, "dfe8debc7221c45b9df08afe77a0d0f411e216a2695e230050b14f26bbaeb68ea860e296882ea11a5219908c2d7c8d2fd787f4f6d1daaf90f491f3589caf9b31761d3ce39a9419682b0a0a0a35f58a1ec07d6a36e3d8"}}, 0x0, 0x0, 0x0}, 0x0) [ 1251.736784][ T3560] usb 1-1: new high-speed USB device number 36 using dummy_hcd 00:20:51 executing program 2: unshare(0x40400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') lseek(r0, 0x0, 0x0) 00:20:52 executing program 1: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) [ 1252.112480][ T5724] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1252.162493][ T116] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1252.183254][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.194573][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.204536][ T3560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1252.217790][ T3560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1252.227328][ T3560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.263134][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.271235][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.312140][ T3560] usb 1-1: config 0 descriptor?? [ 1252.504473][ T116] usb 6-1: Using ep0 maxpacket: 16 [ 1252.572870][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.584729][ T5724] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1252.594630][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.610934][ T5724] usb 4-1: config 0 descriptor?? [ 1252.753103][ T5724] rc_core: IR keymap rc-hauppauge not found [ 1252.759125][ T5724] Registered IR keymap rc-empty [ 1252.765849][ T5724] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1252.779931][ T5724] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 1252.808376][ T3560] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 1252.828789][ T3560] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 1252.852570][ T116] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=97.f1 [ 1252.861983][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.870129][ T116] usb 6-1: Product: syz [ 1252.875688][ T116] usb 6-1: Manufacturer: syz [ 1252.880407][ T116] usb 6-1: SerialNumber: syz [ 1252.925722][ T3560] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1252.938369][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1252.971946][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1253.003676][ T116] usb 6-1: config 0 descriptor?? [ 1253.107248][ T3567] usb 1-1: USB disconnect, device number 36 [ 1253.242113][ C1] igorplugusb 4-1:0.0: receive overflow, at least 9 lost [ 1253.282652][ T116] usb 6-1: ignoring: probably an ADSL modem [ 1253.476128][T13793] UDC core: couldn't find an available UDC or it's busy: -16 [ 1253.484869][T13793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1253.568431][ T3560] usb 4-1: USB disconnect, device number 30 [ 1253.593844][ T116] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1253.619106][ T116] usb 6-1: USB disconnect, device number 26 00:20:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001700)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "62b2e099"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x0, '\a\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0x501c4814, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x100}) 00:20:53 executing program 4: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0) 00:20:53 executing program 1: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:53 executing program 4: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:53 executing program 1: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001e00)={0x84, &(0x7f0000001980)={0x0, 0x0, 0xd, "e7df098a69b3cbf8010b53c406"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$inet6(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x200000d0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) 00:20:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x69) 00:20:54 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1254.192225][ T116] usb 1-1: new high-speed USB device number 37 using dummy_hcd 00:20:54 executing program 4: unshare(0x40400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836010004b0e0301a4ce875f2e3ff5f163ee340b767950080f5ff000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x5, &(0x7f0000000200)={0x0}, 0x20) 00:20:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x14, 0x3fa, 0x0, 0x0, 0x0, "a9"}, 0x14}}, 0x0) 00:20:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x69) [ 1254.552327][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.563622][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.573747][ T116] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1254.586924][ T116] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1254.596275][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.702183][ T3567] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1254.714214][ T116] usb 1-1: config 0 descriptor?? [ 1254.942040][ T3560] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1255.063707][ T3567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.210557][ T116] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 1255.233007][ T3567] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.241026][ T116] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 1255.244013][ T3567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.258823][ T3567] usb 6-1: Product: syz [ 1255.263182][ T3567] usb 6-1: Manufacturer: syz [ 1255.267912][ T3567] usb 6-1: SerialNumber: syz [ 1255.319271][ T116] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1255.338106][ T3560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.348214][ T3560] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1255.357479][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.446471][ T3560] usb 4-1: config 0 descriptor?? [ 1255.506742][T13770] usb 1-1: USB disconnect, device number 37 [ 1255.672122][ T3560] rc_core: IR keymap rc-hauppauge not found [ 1255.678259][ T3560] Registered IR keymap rc-empty [ 1255.685230][ T3560] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1255.697648][ T3560] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 1255.901938][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1255.941915][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 00:20:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x69) 00:20:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x25) 00:20:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000012900)) 00:20:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_BTF_INFO(0x1e, &(0x7f00000060c0)={r1, 0x0, 0x0}, 0x10) [ 1256.212009][ C1] igorplugusb 4-1:0.0: receive overflow, at least 9 lost [ 1256.279940][T13837] loop1: detected capacity change from 0 to 512 [ 1256.536164][T13826] UDC core: couldn't find an available UDC or it's busy: -16 [ 1256.543923][T13826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1256.739976][ T116] usb 4-1: USB disconnect, device number 31 [ 1257.120314][T13837] EXT4-fs: error -4 creating inode table initialization thread [ 1257.152602][ T3567] cdc_ncm 6-1:1.0: failed to get mac address 00:20:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x69) [ 1257.174027][ T3567] cdc_ncm 6-1:1.0: bind() failure [ 1257.190922][T13837] EXT4-fs (loop1): mount failed 00:20:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x2c}}, 0x0) [ 1257.272217][ T3567] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 1257.332242][ T3567] cdc_mbim: probe of 6-1:1.1 failed with error -71 00:20:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001e00)={0x84, &(0x7f0000001980)={0x0, 0x0, 0xd, "e7df098a69b3cbf8010b53c406"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$inet6(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x200000d0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) 00:20:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="ae88bff83e1000005a90f57f07703aef5c159454746e61e722772e11b44e69d90cf41bdd2ac8bb8c434e60e46292", 0x2e}, {&(0x7f0000000000)="090000000000000028712e377d08e1a1637877aaf5933173a536d2601e8109e0c4768c1c49255bdac80666b935b852a7e6cc", 0x32}], 0x2) 00:20:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002980)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002440)={&(0x7f0000002380)={0x1d, 0x0, 0x1}, 0x18, &(0x7f0000002400)={&(0x7f00000023c0)="92", 0x1}}, 0x0) [ 1257.383651][ T3567] usbtest: probe of 6-1:1.1 failed with error -71 [ 1257.492803][ T3567] usb 6-1: USB disconnect, device number 27 [ 1257.681723][T13844] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1257.774950][T13848] vxcan1: tx drop: invalid da for name 0x0000000000000001 00:20:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x25) 00:20:58 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:20:58 executing program 2: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9d}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x32f, @time={0x5898}}) 00:20:58 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ee9000/0x3000)=nil, 0x3000, 0x0) 00:20:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) [ 1258.142356][ T116] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1258.352595][ T24] audit: type=1326 audit(1258.383:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6f04549 code=0x7ffc0000 [ 1258.375098][ T24] audit: type=1326 audit(1258.383:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf6f04549 code=0x7ffc0000 [ 1258.398099][ T24] audit: type=1326 audit(1258.403:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6f04549 code=0x7ffc0000 00:20:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x9, 0x7, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x7fff, r0}, 0x38) 00:20:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f0000000240)=0x10) 00:20:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x40, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c00210000000000002164000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a080074001d0000000000001d00080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xe000}], 0x0, &(0x7f0000000080)={[{@check_relaxed}]}) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffff030000000081000000000d000000803200000002bb0d48ca64b85d9708dc0490e889950e87be4cd15d751a92b224a5705cf250a1ee257ee8d929e16eba4a76fd7f5fa13cb61e8f82a57b4af303c96ff594fa92"], &(0x7f00000002c0)) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x20, 0x0, 0x28a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)=""/4, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) statx(r0, &(0x7f0000000740)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)) r3 = request_key(&(0x7f0000002000)='blacklist\x00', &(0x7f0000002040)={'syz', 0x2}, &(0x7f0000002080)='((]]@\xa2\x00', r2) r4 = request_key(&(0x7f00000020c0)='rxrpc_s\x00', &(0x7f0000002100)={'syz', 0x2}, &(0x7f0000002140)='check=relaxed', r3) keyctl$negate(0xd, r4, 0x21, r1) 00:20:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) setreuid(0x0, 0xee01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f00000000c0)={0x52}) [ 1259.604966][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.615100][ T116] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1259.624540][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.443880][ T116] usb 4-1: config 0 descriptor?? [ 1260.612167][ T116] rc_core: IR keymap rc-hauppauge not found [ 1260.618173][ T116] Registered IR keymap rc-empty [ 1260.624850][ T116] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1260.637189][ T116] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 00:21:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001e00)={0x84, &(0x7f0000001980)={0x0, 0x0, 0xd, "e7df098a69b3cbf8010b53c406"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT=r2], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$inet6(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x200000d0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) 00:21:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x5, 0x49, 0x3f}) 00:21:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x9, 0x7, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x7fff, r0}, 0x38) 00:21:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x25) 00:21:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000340)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={r0, 0x200, 0x29e4, 0x9}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x40000000002, 0x3, 0x2) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000003c0), &(0x7f0000000400)=0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) sendmmsg$inet(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c894) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x14, r5, 0x303, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x63}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040801}, 0x110) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0xc7, 0x4) sendto$inet6(r0, 0x0, 0xffffffffffffff18, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) 00:21:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) [ 1261.042829][ T3567] usb 4-1: USB disconnect, device number 32 00:21:01 executing program 1: syz_usb_connect(0x0, 0x35, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x1c, 0xd1, 0xe5, 0x8, 0x1a86, 0x7523, 0x9d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdd, 0x3f, 0x1, 0xa0, 0x1f, 0xc5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "2897dc89a638"}]}}]}}]}}]}}, 0x0) 00:21:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x5, 0x49, 0x3f}) 00:21:01 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) [ 1261.712434][ T116] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1262.150236][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.160508][ T116] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1262.169902][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.335027][ T116] usb 4-1: config 0 descriptor?? 00:21:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x5, 0x49, 0x3f}) [ 1262.532661][ T3567] usb 2-1: new high-speed USB device number 35 using dummy_hcd 00:21:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @link_local}, 0x0, {0x2, 0x0, @private}, 'bridge0\x00'}) 00:21:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x9, 0x7, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x7fff, r0}, 0x38) [ 1262.643909][ T116] rc_core: IR keymap rc-hauppauge not found [ 1262.649925][ T116] Registered IR keymap rc-empty [ 1262.656416][ T116] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1262.668812][ T116] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 1262.742301][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1262.772506][ T3567] usb 2-1: Using ep0 maxpacket: 8 [ 1262.782231][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1262.902937][ T3567] usb 2-1: config 0 has an invalid interface number: 221 but max is 0 [ 1262.911291][ T3567] usb 2-1: config 0 has no interface number 0 [ 1262.918106][ T3567] usb 2-1: config 0 interface 221 altsetting 63 has an invalid endpoint with address 0x0, skipping [ 1262.929048][ T3567] usb 2-1: config 0 interface 221 has no altsetting 0 [ 1263.192786][ T3567] usb 2-1: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice= 9.d4 [ 1263.202449][ T3567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.210584][ T3567] usb 2-1: Product: syz [ 1263.215058][ T3567] usb 2-1: Manufacturer: syz [ 1263.219763][ T3567] usb 2-1: SerialNumber: syz [ 1263.332014][ C1] igorplugusb 4-1:0.0: receive overflow, at least 9 lost [ 1263.409101][ T3567] usb 2-1: config 0 descriptor?? [ 1263.457829][ T3567] ch341 2-1:0.221: ch341-uart converter detected [ 1263.588273][T13887] UDC core: couldn't find an available UDC or it's busy: -16 [ 1263.599138][T13887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1263.662429][ T3567] usb 2-1: failed to receive control message: -71 [ 1263.669153][ T3567] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1263.705559][ T3560] usb 4-1: USB disconnect, device number 33 [ 1263.756615][ T3567] usb 2-1: USB disconnect, device number 35 [ 1263.766255][ T3567] ch341 2-1:0.221: device disconnected 00:21:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000fd0a00dc0100001000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdc, &(0x7f00000000c0)=""/220, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:21:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x13, r1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0x2) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) io_uring_enter(r1, 0x2a71, 0x0, 0x0, 0x0, 0x25) 00:21:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x5, 0x49, 0x3f}) 00:21:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x9, 0x7, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x7fff, r0}, 0x38) 00:21:04 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000040)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4003012, r1, 0x0) 00:21:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f00000001c0)='./control\x00', &(0x7f0000000280), 0x200800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x200}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, 'security.ima\x00'}}], [{@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'security.ima\x00'}}, {@smackfsdef}, {@euid_lt}, {@appraise}]}}) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000400)=ANY=[], 0x44) fcntl$setstatus(r0, 0x4, 0x44000) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./control\x00') chdir(&(0x7f0000000180)='./control\x00') sendfile(r0, r0, &(0x7f0000000240), 0x7fff) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) fchown(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000540)="94b3cbb1f22936e9cb88b0f1ec8597dfc7bafa6833a612e199ef430c3eb240539b6c598181c81bd50ebb76d5ab1a9e9804f1bac3bbf1f4528be4a7d78c9567260f4377dad4108665a0ec61504242a9a214adf63c23543cbca97922fd7190eaa011ed20d44e02a20ce94ccf5e0615c5f81eed934f557996ed5acf467af0745afaa6db6e9e748c7bc6d50296594d4a01b4650b070c8eabee5a9efd5b11f8ea232e96fbdfe0c55cd5358456323a84dd68ddb78cf31681f498e5082ef033b146611e7c191e0eaef1068b1aec626d97574b0bc0472c4e03aa6eedf560eb", 0xdb) dup(0xffffffffffffffff) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 00:21:04 executing program 2: unshare(0x400) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 00:21:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0', "176ab62a37259d090e350ca6"}, 0x10) 00:21:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000055c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="a3", 0x1}], 0x1}, 0x9801) recvmmsg$unix(r1, &(0x7f000000bfc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40032023, 0x0) [ 1265.234738][T13921] loop1: detected capacity change from 0 to 4096 00:21:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=1']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 00:21:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) [ 1268.383044][T13921] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:21:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000008c0)={"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"}) 00:21:09 executing program 4: r0 = openat$adsp1(0xffffff9c, &(0x7f0000002d80), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0xc0045006, 0x0) 00:21:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x55, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) 00:21:11 executing program 0: unshare(0x40400) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x17, 0x51, 0x0}) 00:21:16 executing program 4: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x4c, r0, 0x50b, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8}]}, 0x4c}}, 0x0) 00:21:16 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8bb}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x0) 00:21:16 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast, {[@timestamp={0x44, 0x4, 0x11}]}}}}}}, 0x0) 00:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0xa, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 00:21:16 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@pppol2tpv3in6={0x1e, 0x3, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r0) 00:21:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="2fe69433ce4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x3c}}, 0x0) 00:21:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="2fe69433ce4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:17 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0xe000001f}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 00:21:17 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) 00:21:17 executing program 3: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r2, 0x1) flock(r1, 0x1) dup3(r0, r1, 0x0) 00:21:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r0, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 00:21:17 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "30fbc5", 0x8, 0x0, 0x0, @private1, @mcast2={0xff, 0x3}, {[@srh={0x0, 0x0, 0xc2, 0x4}]}}}}}, 0x0) 00:21:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="2fe69433ce4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:21:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:21:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x2}) 00:21:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x23}}) 00:21:17 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "30fbc5", 0x8, 0x0, 0x0, @private1, @mcast2={0xff, 0x3}, {[@srh={0x0, 0x0, 0xc2, 0x4}]}}}}}, 0x0) 00:21:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="2fe69433ce4e", 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:17 executing program 4: r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000340)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)="e3", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r1}, 0x0, 0x0, 0x0) 00:21:18 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x200000) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:21:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback=0x1000000}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x4, 0x0, 0x0, @fd}, @typed={0x49, 0x0, 0x0, 0x0, @binary="9744ee0accc57048aa6887df49cf40a2834d0700b4a1504d88933e2b959b886b26819b6f84b55562576b7dd00010c286f8004eb6db581b663ff7e80ab0a25826be93fc53b3"}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @generic="0b86f0413b31fe602afabfeeb3cc2906d9438259bd2b4a2a25877a2abd6bb8c82fe9de763a39402869fff33108567c32d23fa3a579e7627633e92797503e6f0ab3ad834bd24607d728881e3f8cfed7423da27ad2efd59ab4f0f38638e1756c824529ae172c4eb505e1a1b3707e1b8887d668ef0022a3e32dc4d4555d5a9c6b85acbdfb42e3bcc48d3461f7ebdb9dcdc54bde0f7e"]}]}, 0x114}], 0x1}, 0x0) 00:21:18 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "30fbc5", 0x8, 0x0, 0x0, @private1, @mcast2={0xff, 0x3}, {[@srh={0x0, 0x0, 0xc2, 0x4}]}}}}}, 0x0) [ 1278.331371][T13996] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. 00:21:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) fchown(r1, 0x0, 0x0) 00:21:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) 00:21:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x2000000}) 00:21:19 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/176, 0xb0) 00:21:19 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000002d80)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb2020d000200152c000000000000000001020014bb000000000000002300000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 00:21:19 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r3, 0x4, r0}, 0x10) 00:21:19 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:19 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "30fbc5", 0x8, 0x0, 0x0, @private1, @mcast2={0xff, 0x3}, {[@srh={0x0, 0x0, 0xc2, 0x4}]}}}}}, 0x0) 00:21:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x2000000}) 00:21:20 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x77b, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 00:21:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x1, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x0, 0xfffffffffffffffe}, 0x10) 00:21:20 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x8000000) 00:21:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/176, 0xb0) [ 1280.222216][ T116] usb 5-1: new high-speed USB device number 27 using dummy_hcd 00:21:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x2000000}) 00:21:20 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x16, 0x0, 0x0, 0xe0000002}}}}}, 0x0) 00:21:20 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000830000/0x3000)=nil, 0x3000, 0x3) [ 1280.472254][ T116] usb 5-1: Using ep0 maxpacket: 8 [ 1280.593753][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1280.605212][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1280.615224][ T116] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1280.625283][ T116] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 00:21:20 executing program 1: clock_getres(0x3, &(0x7f0000000640)) [ 1280.635395][ T116] usb 5-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1280.644686][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:21:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/176, 0xb0) [ 1280.882332][ T116] usb 5-1: config 0 descriptor?? [ 1281.132660][ T116] usb 5-1: usb_control_msg returned -32 [ 1281.139943][ T116] usbtmc 5-1:0.0: can't read capabilities [ 1281.694776][ T116] usb 5-1: USB disconnect, device number 27 [ 1281.713183][T14040] usbtmc 5-1:0.0: usb_control_msg returned -71 00:21:22 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000000c0)={0x0, 0x0, 0x2000000}) 00:21:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x16, 0x0, 0x0, 0xe0000002}}}}}, 0x0) 00:21:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/176, 0xb0) 00:21:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x32, 0x22, 0x84, 0x40, 0x424, 0x9d00, 0xfc2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x77, 0x69}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="10f4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000580), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:22 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 00:21:22 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:22 executing program 5: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="5001000036001307ebff40041200c2ce3d"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x680b, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 00:21:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000100)) 00:21:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x16, 0x0, 0x0, 0xe0000002}}}}}, 0x0) [ 1282.662378][ T116] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1282.812285][T13770] usb 5-1: new high-speed USB device number 28 using dummy_hcd 00:21:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x34}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:21:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000280)) [ 1283.002623][T10169] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1283.032353][ T116] usb 2-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=fc.2a [ 1283.041604][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.062218][T13770] usb 5-1: Using ep0 maxpacket: 8 [ 1283.123355][ T116] usb 2-1: config 0 descriptor?? [ 1283.182310][T13770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1283.195651][T13770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.205993][T13770] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.215880][T13770] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.226035][T13770] usb 5-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1283.235297][T13770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.251722][T13770] usb 5-1: config 0 descriptor?? [ 1283.253474][T10169] usb 4-1: Using ep0 maxpacket: 8 [ 1283.356226][T14065] ramfs: Bad value for 'mode' [ 1283.382874][T10169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1283.395377][T10169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.407278][T10169] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.417541][T10169] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.427663][T10169] usb 4-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1283.437056][T10169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.512554][T13770] usb 5-1: usb_control_msg returned -32 [ 1283.518388][T13770] usbtmc 5-1:0.0: can't read capabilities [ 1283.518953][T10169] usb 4-1: config 0 descriptor?? [ 1283.782305][T10169] usb 4-1: usb_control_msg returned -32 [ 1283.788262][T10169] usbtmc 4-1:0.0: can't read capabilities [ 1284.083910][T13770] usb 5-1: USB disconnect, device number 28 [ 1284.105592][T14066] usbtmc 5-1:0.0: usb_control_msg returned -71 00:21:24 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="833695d1b54d", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x16, 0x0, 0x0, 0xe0000002}}}}}, 0x0) 00:21:24 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f0000001300)=[{0x0, 0x0, 0x736}, {&(0x7f0000000280)="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", 0x1ed}]) 00:21:24 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x280, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}}) [ 1285.302108][ T3567] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1285.552393][ T116] smscufx: Failed to write register index 0x0000700c with value 0x1fe3e0b8 [ 1285.561191][ T116] smscufx: ufx_reg_clear_and_set_bits error writing 0x700c [ 1285.561233][ T116] smscufx: error clearing output gate in 0x700C [ 1285.568747][ T116] smscufx: error -71 configuring system clock [ 1285.576784][ T116] smscufx: probe of 2-1:0.0 failed with error -71 [ 1285.582981][ T3567] usb 5-1: Using ep0 maxpacket: 8 [ 1285.623668][ T116] usb 2-1: USB disconnect, device number 36 [ 1285.685771][T10169] usb 4-1: USB disconnect, device number 34 [ 1285.732577][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1285.743752][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.755268][ T3567] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1285.765683][ T3567] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1285.775840][ T3567] usb 5-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1285.785132][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.862888][ T3567] usb 5-1: config 0 descriptor?? 00:21:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) close(r1) 00:21:26 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x4, r0, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x91) sched_setattr(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') 00:21:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000500030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 00:21:26 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x280, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}}) 00:21:26 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) [ 1286.113417][ T3567] usb 5-1: usb_control_msg returned -32 [ 1286.119183][ T3567] usbtmc 5-1:0.0: can't read capabilities [ 1286.196951][T14082] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1286.237199][T14082] device 70Ēd entered promiscuous mode 00:21:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 00:21:26 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x280, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}}) [ 1286.482605][T10169] usb 4-1: new high-speed USB device number 35 using dummy_hcd 00:21:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xf804, 0x4, 0x3d8, 0x0, 0xe0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="9eb39d62f875"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_1\x00', 'syzkaller1\x00'}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x2}}, {{@arp={@broadcast, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'ip6_vti0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="bc7f2477b65e", @dev, @local}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @private}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0xae) [ 1286.558029][T14085] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1286.567763][T14085] : renamed from 70Ēd [ 1286.621065][T14085] device  left promiscuous mode [ 1286.632950][T14085] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1286.715029][ T3560] usb 5-1: USB disconnect, device number 29 [ 1286.741191][T10169] usb 4-1: Using ep0 maxpacket: 8 [ 1286.747158][T14088] usbtmc 5-1:0.0: usb_control_msg returned -71 [ 1286.862825][T10169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1286.875427][T10169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1286.887297][T10169] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1286.897530][T10169] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1286.907660][T10169] usb 4-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1286.916978][T10169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.934779][T10169] usb 4-1: config 0 descriptor?? [ 1287.192251][T10169] usb 4-1: usb_control_msg returned -32 [ 1287.197958][T10169] usbtmc 4-1:0.0: can't read capabilities 00:21:27 executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:27 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x280, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}}) 00:21:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/sas_phy', 0x40500, 0x19c) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x9}) 00:21:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xf804, 0x4, 0x3d8, 0x0, 0xe0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="9eb39d62f875"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_1\x00', 'syzkaller1\x00'}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x2}}, {{@arp={@broadcast, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'ip6_vti0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="bc7f2477b65e", @dev, @local}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @private}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0xae) 00:21:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000500030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 1287.436657][T14102] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 00:21:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xf804, 0x4, 0x3d8, 0x0, 0xe0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="9eb39d62f875"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_1\x00', 'syzkaller1\x00'}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x2}}, {{@arp={@broadcast, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'ip6_vti0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="bc7f2477b65e", @dev, @local}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @private}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0xae) 00:21:27 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000002400)=[{&(0x7f0000000040)=""/85, 0x20000095}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2) [ 1287.546832][T14102] device  entered promiscuous mode 00:21:27 executing program 2: timer_create(0x3, &(0x7f0000000040)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 1287.785113][T13770] usb 4-1: USB disconnect, device number 35 [ 1287.803700][T14106] usbtmc 4-1:0.0: usb_control_msg returned -71 [ 1287.902604][ T3567] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1287.907311][T14104] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1287.920706][T14104] device  left promiscuous mode [ 1287.932337][T14104] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1288.152221][ T3567] usb 5-1: Using ep0 maxpacket: 8 [ 1288.282866][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1288.294138][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1288.304271][ T3567] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1288.315707][ T3567] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1288.326000][ T3567] usb 5-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1288.335276][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.424275][ T3567] usb 5-1: config 0 descriptor?? 00:21:28 executing program 3: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1ad923610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200007e000009058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 00:21:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xf804, 0x4, 0x3d8, 0x0, 0xe0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="9eb39d62f875"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge_slave_1\x00', 'syzkaller1\x00'}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x2}}, {{@arp={@broadcast, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'caif0\x00', 'ip6_vti0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="bc7f2477b65e", @dev, @local}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @private}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0xae) 00:21:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "d7090d56350926dcd0f7dad91262d0b3ec9db222ee0831141cccbaf699341601", "f443f2bddb8dcfea9273ae2f751a4a8f0928d7a371a182f52bb8d5d3304024b4"}}}]}, 0x268}}, 0x0) 00:21:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000500030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 1288.655827][T14120] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1288.672633][ T3567] usb 5-1: usb_control_msg returned -32 [ 1288.678386][ T3567] usbtmc 5-1:0.0: can't read capabilities [ 1288.714131][T14120] device  entered promiscuous mode [ 1289.025037][T14121] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1289.038103][T14121] device  left promiscuous mode [ 1289.049539][T14121] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1289.246911][ T3567] usb 5-1: USB disconnect, device number 30 [ 1289.262644][T14125] usbtmc 5-1:0.0: usb_control_msg returned -71 [ 1289.362308][ T3560] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1289.612142][ T3560] usb 4-1: Using ep0 maxpacket: 8 [ 1289.742800][ T3560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.756046][ T3560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.766345][ T3560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.776393][ T3560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.786652][ T3560] usb 4-1: New USB device found, idVendor=ee8d, idProduct=d91a, bcdDevice=61.23 [ 1289.796014][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.811351][ T3560] usb 4-1: config 0 descriptor?? 00:21:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000140)=0x8bc3, 0x4) setsockopt$inet_int(r0, 0x0, 0x200000000000c8, &(0x7f0000000000), 0x4) 00:21:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:21:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 00:21:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000500030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 00:21:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) [ 1289.947081][T14131] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1289.972311][T14131] device  entered promiscuous mode 00:21:30 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) [ 1290.110921][ T3560] usb 4-1: usb_control_msg returned -32 [ 1290.116832][ T3560] usbtmc 4-1:0.0: can't read capabilities [ 1290.163348][T14137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.195711][T14134] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1290.205528][T14134] device  left promiscuous mode [ 1290.217074][T14134] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. 00:21:30 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) [ 1290.317797][T14141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.437927][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:21:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000038000511d25a80648c63940d0124fc602f6e35400c0003000200000737153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) [ 1290.716332][ T5724] usb 4-1: USB disconnect, device number 36 [ 1290.739870][T14142] usbtmc 4-1:0.0: usb_control_msg returned -71 00:21:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:21:31 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200), 0xc) getpeername$qrtr(r0, 0x0, &(0x7f0000000240)) 00:21:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 00:21:31 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:21:31 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) [ 1291.452531][T14149] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:21:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1291.618961][T14152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1291.753906][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.780280][T14154] not chained 450000 origins [ 1291.785147][T14154] CPU: 0 PID: 14154 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 1291.793967][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.804051][T14154] Call Trace: [ 1291.807347][T14154] [ 1291.810290][T14154] dump_stack_lvl+0x1ff/0x28e [ 1291.815022][T14154] dump_stack+0x25/0x28 [ 1291.819228][T14154] kmsan_internal_chain_origin+0x78/0x110 [ 1291.825085][T14154] ? skb_recv_datagram+0x4a1/0x530 [ 1291.830242][T14154] ? kmsan_get_metadata+0x33/0x220 [ 1291.835398][T14154] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1291.841256][T14154] ? raw_recvmsg+0x55c/0xde0 [ 1291.845935][T14154] ? kmsan_get_metadata+0x33/0x220 [ 1291.851087][T14154] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1291.856945][T14154] ? should_fail+0x75/0x9c0 [ 1291.861485][T14154] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1291.867343][T14154] ? kmsan_get_metadata+0x33/0x220 [ 1291.872513][T14154] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1291.878895][T14154] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1291.885007][T14154] ? kmsan_get_metadata+0x33/0x220 [ 1291.891116][T14154] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1291.897058][T14154] __msan_chain_origin+0xbf/0x140 [ 1291.902125][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1291.907289][T14154] get_compat_msghdr+0x108/0x2c0 [ 1291.912268][T14154] ? __sys_recvmmsg+0x51c/0x6f0 [ 1291.917254][T14154] do_recvmmsg+0xd77/0x2120 [ 1291.921824][T14154] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1291.927693][T14154] ? kmsan_get_metadata+0x33/0x220 [ 1291.932860][T14154] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 1291.939152][T14154] ? __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1291.945702][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1291.950437][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1291.956832][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1291.961904][T14154] do_fast_syscall_32+0x34/0x70 [ 1291.966801][T14154] do_SYSENTER_32+0x1b/0x20 [ 1291.971347][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1291.977732][T14154] RIP: 0023:0xf6e6e549 [ 1291.981820][T14154] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1292.001468][T14154] RSP: 002b:00000000f58685cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1292.010012][T14154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200066c0 [ 1292.018035][T14154] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 1292.026033][T14154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1292.034027][T14154] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1292.042016][T14154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1292.050020][T14154] [ 1292.055365][T14154] Uninit was stored to memory at: [ 1292.060465][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.066109][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.071097][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.075780][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.080511][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.087033][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.092223][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.097133][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.101684][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.108184][T14154] [ 1292.110511][T14154] Uninit was stored to memory at: [ 1292.115723][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.120874][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.125957][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.130512][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.135456][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.141964][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.147054][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.152091][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.156646][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.156908][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.163160][T14154] [ 1292.163169][T14154] Uninit was stored to memory at: [ 1292.163235][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.163283][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.163327][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.195264][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.199993][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.206503][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.211579][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.216587][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.221160][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.227643][T14154] [ 1292.229977][T14154] Uninit was stored to memory at: [ 1292.235144][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.240292][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.245385][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.249941][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.254792][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.261174][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.266382][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.271281][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.275954][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.282488][T14154] [ 1292.284821][T14154] Uninit was stored to memory at: [ 1292.289903][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.295176][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.300209][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.304891][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.309619][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.316137][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.321217][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.326230][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.330783][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.337286][T14154] [ 1292.339622][T14154] Uninit was stored to memory at: [ 1292.344796][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.349950][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.355081][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.359652][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.364503][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.370896][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.376105][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.381005][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.385667][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.392174][T14154] [ 1292.394503][T14154] Uninit was stored to memory at: [ 1292.399602][T14154] __get_compat_msghdr+0x6e1/0x9d0 [ 1292.404880][T14154] get_compat_msghdr+0x108/0x2c0 [ 1292.409851][T14154] do_recvmmsg+0xd77/0x2120 [ 1292.414523][T14154] __sys_recvmmsg+0x51c/0x6f0 [ 1292.419261][T14154] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 1292.425780][T14154] __do_fast_syscall_32+0x96/0xf0 [ 1292.430855][T14154] do_fast_syscall_32+0x34/0x70 [ 1292.435883][T14154] do_SYSENTER_32+0x1b/0x20 [ 1292.440432][T14154] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1292.446938][T14154] [ 1292.449279][T14154] Local variable msg_sys created at: [ 1292.454674][T14154] do_recvmmsg+0xbb/0x2120 [ 1292.459133][T14154] __sys_recvmmsg+0x51c/0x6f0 00:21:32 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:21:33 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) [ 1292.936735][T14165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.067083][T14164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.230551][T14164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.272207][T14169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.518611][T14174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.551634][ T5724] wlan1: authenticate with 08:02:11:00:00:00 [ 1293.560145][ T5724] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 00:21:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) [ 1293.589670][T14169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.660105][ T3611] wlan1: authenticated 00:21:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1293.682615][T14174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.699882][ T5724] mac80211_hwsim hwsim15 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1293.721967][ T3611] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1293.761337][T14169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.766436][ T3611] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1293.780274][ T3611] wlan1: associated [ 1293.786741][T14174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:21:33 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:21:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) [ 1294.276360][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:21:34 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="9c", 0x41, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3, r3}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, 0x0, r0}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'wp256-generic\x00'}}) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000440)=""/236, 0xec, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:21:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1294.810440][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.928587][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.974296][ C1] ===================================================== [ 1294.981413][ C1] BUG: KMSAN: uninit-value in ieee80211_sta_tx_notify+0x3b8/0x950 [ 1294.989378][ C1] ieee80211_sta_tx_notify+0x3b8/0x950 [ 1294.994897][ C1] ieee80211_tx_status_ext+0x1234/0x5610 [ 1295.000631][ C1] ieee80211_tx_status+0x228/0x270 [ 1295.005776][ C1] ieee80211_tasklet_handler+0x2fe/0x370 [ 1295.011442][ C1] tasklet_action_common+0x515/0x850 [ 1295.016821][ C1] tasklet_action+0x70/0x80 [ 1295.021359][ C1] __do_softirq+0x1ee/0x7c5 [ 1295.025894][ C1] do_softirq+0x16d/0x220 [ 1295.030260][ C1] __local_bh_enable_ip+0xd5/0xe0 [ 1295.035317][ C1] local_bh_enable+0x36/0x40 [ 1295.039993][ C1] __ieee80211_tx_skb_tid_band+0x29c/0x3a0 [ 1295.045846][ C1] ieee80211_send_nullfunc+0x525/0x620 [ 1295.051339][ C1] ieee80211_mgd_probe_ap_send+0x6f1/0xa40 [ 1295.057187][ C1] ieee80211_mgd_probe_ap+0x572/0x610 [ 1295.062638][ C1] ieee80211_beacon_connection_loss_work+0x1b0/0x440 [ 1295.069367][ C1] process_one_work+0xdb9/0x1820 [ 1295.074395][ C1] worker_thread+0x10bc/0x21f0 [ 1295.079201][ C1] kthread+0x721/0x850 [ 1295.083298][ C1] ret_from_fork+0x1f/0x30 [ 1295.087789][ C1] [ 1295.090113][ C1] Uninit was created at: [ 1295.094424][ C1] __kmalloc_node_track_caller+0xe0c/0x1510 [ 1295.100369][ C1] __alloc_skb+0x545/0xf90 [ 1295.104818][ C1] __netdev_alloc_skb+0x4b9/0x8c0 [ 1295.109876][ C1] ieee80211_nullfunc_get+0x2b6/0x820 [ 1295.115288][ C1] ieee80211_send_nullfunc+0x124/0x620 [ 1295.120870][ C1] ieee80211_mgd_probe_ap_send+0x6f1/0xa40 [ 1295.126890][ C1] ieee80211_mgd_probe_ap+0x572/0x610 [ 1295.132299][ C1] ieee80211_beacon_connection_loss_work+0x1b0/0x440 [ 1295.139017][ C1] process_one_work+0xdb9/0x1820 [ 1295.144005][ C1] worker_thread+0x10bc/0x21f0 [ 1295.148820][ C1] kthread+0x721/0x850 [ 1295.152919][ C1] ret_from_fork+0x1f/0x30 [ 1295.157367][ C1] [ 1295.159695][ C1] CPU: 1 PID: 7010 Comm: kworker/u4:9 Not tainted 5.16.0-rc5-syzkaller #0 [ 1295.168222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.178296][ C1] Workqueue: phy16 ieee80211_beacon_connection_loss_work [ 1295.185361][ C1] ===================================================== [ 1295.192353][ C1] Disabling lock debugging due to kernel taint [ 1295.198619][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1295.205069][ C1] CPU: 1 PID: 7010 Comm: kworker/u4:9 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 1295.215005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.225097][ C1] Workqueue: phy16 ieee80211_beacon_connection_loss_work [ 1295.232195][ C1] Call Trace: [ 1295.235485][ C1] [ 1295.238342][ C1] dump_stack_lvl+0x1ff/0x28e [ 1295.243072][ C1] dump_stack+0x25/0x28 [ 1295.247276][ C1] panic+0x487/0xe1f [ 1295.251205][ C1] ? add_taint+0x181/0x210 [ 1295.255667][ C1] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 1295.261522][ C1] kmsan_report+0x2e6/0x2f0 [ 1295.266064][ C1] ? kmsan_get_metadata+0x33/0x220 [ 1295.271253][ C1] ? __msan_warning+0xb8/0x130 [ 1295.276052][ C1] ? ieee80211_sta_tx_notify+0x3b8/0x950 [ 1295.281734][ C1] ? ieee80211_tx_status_ext+0x1234/0x5610 [ 1295.287709][ C1] ? ieee80211_tx_status+0x228/0x270 [ 1295.293051][ C1] ? ieee80211_tasklet_handler+0x2fe/0x370 [ 1295.298905][ C1] ? tasklet_action_common+0x515/0x850 [ 1295.304412][ C1] ? tasklet_action+0x70/0x80 [ 1295.309132][ C1] ? __do_softirq+0x1ee/0x7c5 [ 1295.313888][ C1] ? do_softirq+0x16d/0x220 [ 1295.318436][ C1] ? __local_bh_enable_ip+0xd5/0xe0 [ 1295.323676][ C1] ? local_bh_enable+0x36/0x40 [ 1295.328488][ C1] ? __ieee80211_tx_skb_tid_band+0x29c/0x3a0 [ 1295.334525][ C1] ? ieee80211_send_nullfunc+0x525/0x620 [ 1295.340222][ C1] ? ieee80211_mgd_probe_ap_send+0x6f1/0xa40 [ 1295.346260][ C1] ? ieee80211_mgd_probe_ap+0x572/0x610 [ 1295.351859][ C1] ? ieee80211_beacon_connection_loss_work+0x1b0/0x440 [ 1295.358760][ C1] ? process_one_work+0xdb9/0x1820 [ 1295.363920][ C1] ? worker_thread+0x10bc/0x21f0 [ 1295.368908][ C1] ? kthread+0x721/0x850 [ 1295.373186][ C1] ? ret_from_fork+0x1f/0x30 [ 1295.377832][ C1] ? kmsan_get_metadata+0x33/0x220 [ 1295.382992][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1295.388851][ C1] ? kmem_cache_free+0x4fc/0x910 [ 1295.393840][ C1] ? __kfree_skb+0x298/0x330 [ 1295.398476][ C1] ? kmsan_get_metadata+0x33/0x220 [ 1295.403623][ C1] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 1295.409471][ C1] __msan_warning+0xb8/0x130 [ 1295.414089][ C1] ieee80211_sta_tx_notify+0x3b8/0x950 [ 1295.419580][ C1] ? kmsan_get_metadata+0x33/0x220 [ 1295.424736][ C1] ieee80211_tx_status_ext+0x1234/0x5610 [ 1295.430433][ C1] ieee80211_tx_status+0x228/0x270 [ 1295.435586][ C1] ieee80211_tasklet_handler+0x2fe/0x370 [ 1295.441256][ C1] ? ieee80211_reconfig_filter+0x50/0x50 [ 1295.446920][ C1] tasklet_action_common+0x515/0x850 [ 1295.452256][ C1] tasklet_action+0x70/0x80 [ 1295.456797][ C1] ? tasklet_unlock+0x80/0x80 [ 1295.461504][ C1] __do_softirq+0x1ee/0x7c5 [ 1295.466048][ C1] do_softirq+0x16d/0x220 [ 1295.470406][ C1] [ 1295.473339][ C1] [ 1295.476273][ C1] __local_bh_enable_ip+0xd5/0xe0 [ 1295.481329][ C1] local_bh_enable+0x36/0x40 [ 1295.485963][ C1] __ieee80211_tx_skb_tid_band+0x29c/0x3a0 [ 1295.491818][ C1] ieee80211_send_nullfunc+0x525/0x620 [ 1295.497321][ C1] ieee80211_mgd_probe_ap_send+0x6f1/0xa40 [ 1295.503258][ C1] ieee80211_mgd_probe_ap+0x572/0x610 [ 1295.508673][ C1] ieee80211_beacon_connection_loss_work+0x1b0/0x440 [ 1295.515478][ C1] ? ieee80211_chswitch_work+0xf10/0xf10 [ 1295.521143][ C1] process_one_work+0xdb9/0x1820 [ 1295.526145][ C1] worker_thread+0x10bc/0x21f0 [ 1295.530967][ C1] kthread+0x721/0x850 [ 1295.535060][ C1] ? worker_clr_flags+0x370/0x370 [ 1295.540137][ C1] ? kthread_blkcg+0x120/0x120 [ 1295.544960][ C1] ret_from_fork+0x1f/0x30 [ 1295.549444][ C1] [ 1295.552647][ C1] Kernel Offset: disabled [ 1295.556978][ C1] Rebooting in 86400 seconds..