0285443, &(0x7f0000000200)={0x1f, 0x1306, 0xfff, 0x800, 0x401}) read$FUSE(r0, &(0x7f0000001240)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003280)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300c5fa54a5b8bc8a14fb70b3171aa33b56fe7b120f6b9d57d0f0d0546c30e47c8cc358daeb1992097caff9e139ed5ecaab85db12bce2d941efcd456bc054558aa89d9bab75f87d41219ec6ceb0173db2e4908ea131a1402d60fbe2000000000000000000000000000089a9c315ff301510f67ad73122fabcd8fd3b7f874feca9fcd3bf3e812a1ecb4ecaeb5dbdf520789d170fbeee663a065e9a66021dba1e215b79b07e595d334dd6521d043f6ca039255b86974e006d8dffd0cd165e5d5b6050e6131bbf38048820ff98f6c62c8dc045d5ad265211deed88b4b6b797271445d8284536a47f", @ANYRES64=r2, @ANYBLOB="000000000000000086050000ff0000000300ffffff00"/32], 0x30) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10) 10:54:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000840), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 10:54:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 10:54:30 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r0, 0x0) 10:54:30 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) 10:54:30 executing program 1: r0 = getpgid(0x0) waitid(0x3, r0, 0x0, 0x2, 0x0) 10:54:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:31 executing program 5: r0 = socket(0x11, 0x3, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x107, 0xe, 0x0, 0x0) 10:54:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x78}) 10:54:31 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x7}, &(0x7f0000000180)={r0}, 0x0) 10:54:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:31 executing program 1: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x2, 0x0, 0x0, 0x0) 10:54:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:31 executing program 0: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x8, 0x0}, 0x10) 10:54:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:31 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 10:54:31 executing program 5: setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x97}}, 0x0) 10:54:31 executing program 5: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) 10:54:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x8, 0x3000, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0x2, &(0x7f0000000200)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 10:54:31 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a3) 10:54:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x40000003) 10:54:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x48, 0x0, 0x0) 10:54:32 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 10:54:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x10}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000180)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x10}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000001c0)={r2}, 0x8) 10:54:32 executing program 2: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a3) 10:54:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='<', 0x1, 0x0, 0x0, 0x0) 10:54:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 10:54:32 executing program 2: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x10}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f00000029c0)={r1}, 0x8) 10:54:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a3) 10:54:33 executing program 5: r0 = socket(0x2, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8202e4a3e6"], 0x1) connect(r0, &(0x7f0000000000)=ANY=[], 0x10) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 10:54:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 10:54:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a3) 10:54:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) 10:54:33 executing program 2: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 10:54:33 executing program 4: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @broadcast, @val, {@ipv4}}, 0x0) 10:54:33 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000001c0)=0x10) 10:54:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xffffffffffffffff, 0x0) 10:54:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:34 executing program 0: syz_emit_ethernet(0x96, &(0x7f0000000040)={@empty, @remote, @val, {@ipv4}}, 0x0) 10:54:34 executing program 4: symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 10:54:34 executing program 1: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) 10:54:34 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="05", 0x1}], 0x1, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x184) 10:54:34 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:34 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c6, 0x0) 10:54:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:34 executing program 0: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @val, {@ipv4}}, 0x0) 10:54:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x4, &(0x7f0000000000), 0x9) 10:54:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0xfffffffffffffd88}, 0x10) listen(r0, 0x47) 10:54:35 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @local, @remote}}}}, 0x0) 10:54:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x1e, 0x0, 0x3000000) 10:54:35 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 10:54:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:35 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000100), &(0x7f0000000140)=0x8) 10:54:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000240)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), &(0x7f0000000140)=0x90) 10:54:35 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) 10:54:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:36 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x363642, 0x119) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0xfffffffffffffd88}, 0x10) listen(r0, 0x47) 10:54:36 executing program 5: socket(0x2, 0x3, 0x0) r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[], 0x3ef) 10:54:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10:54:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:36 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) [ 1096.341187][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 1096.341254][ T24] audit: type=1800 audit(1655463276.385:34): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1164 res=0 errno=0 [ 1096.453769][ T24] audit: type=1804 audit(1655463276.465:35): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2656818399/syzkaller.jTmBbk/1183/file0" dev="sda1" ino=1164 res=1 errno=0 10:54:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0xfffffffffffffd88}, 0x10) listen(r0, 0x47) 10:54:36 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:36 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) 10:54:36 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0xfffffffffffffd88}, 0x10) listen(r0, 0x47) 10:54:37 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:37 executing program 0: r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)=@in={0x10}, 0x10) getsockname$inet(r1, 0x0, &(0x7f0000000080)) 10:54:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 10:54:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10, 0x2}, 0x10) 10:54:37 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 10:54:37 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 10:54:37 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:37 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d", 0x200) unlink(0x0) sendfile(r0, r1, 0x0, 0x11f08) 10:54:37 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, 0x0, 0x0) 10:54:37 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:37 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) 10:54:37 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="4209b08de624", @val, {@ipv4}}, 0x0) 10:54:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) [ 1098.009928][ T24] audit: type=1800 audit(1655463278.055:36): pid=18591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1153 res=0 errno=0 [ 1098.033384][ T24] audit: type=1804 audit(1655463278.065:37): pid=18591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir493465107/syzkaller.facE3S/1069/file0" dev="sda1" ino=1153 res=1 errno=0 10:54:38 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, 0x0, 0x0) 10:54:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000180), 0x8) [ 1098.310153][ T24] audit: type=1800 audit(1655463278.255:38): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1175 res=0 errno=0 [ 1098.334156][ T24] audit: type=1804 audit(1655463278.305:39): pid=18596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2656818399/syzkaller.jTmBbk/1185/file0" dev="sda1" ino=1175 res=1 errno=0 10:54:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@multicast1}}, 0xe8) 10:54:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:38 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, 0x0, 0x0) 10:54:38 executing program 1: r0 = socket(0x18, 0x0, 0x2) getpeername$packet(r0, 0x0, 0x0) 10:54:39 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x7ffff000}}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0xff0f) 10:54:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c7", 0x1}], 0x1}, 0x0) socket$inet6(0xa, 0x0, 0x9) 10:54:39 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) 10:54:39 executing program 1: r0 = socket(0x18, 0x0, 0x2) getpeername$packet(r0, 0x0, 0x0) 10:54:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) [ 1099.547720][ T24] audit: type=1800 audit(1655463279.595:40): pid=18629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1169 res=0 errno=0 [ 1099.654106][ T24] audit: type=1804 audit(1655463279.645:41): pid=18629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2656818399/syzkaller.jTmBbk/1186/file0" dev="sda1" ino=1169 res=1 errno=0 10:54:39 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000300)=""/50) [ 1100.081381][ T24] audit: type=1800 audit(1655463280.125:42): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1170 res=0 errno=0 10:54:40 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000080)=""/253) 10:54:40 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) [ 1100.245115][ T24] audit: type=1804 audit(1655463280.175:43): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1242017881/syzkaller.PxlvJp/1153/file0" dev="sda1" ino=1170 res=1 errno=0 10:54:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)) 10:54:40 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x1}}, 0x18) 10:54:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f00000002c0)=0x90) 10:54:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:40 executing program 2: r0 = socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 10:54:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "9e166528991742d373e691e0d868097b3e527a5184bdb87d81cd24a84f9f79ee301f3a5083c1046e866e6c1ecc6fc31d246a4d1700"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "784d1f844345aa84c298aef30537f4bab5e907a50cacbb1fd7cb813a2cb9e030210083e7d6198376cc93e9213f5576df8e957c2b17852d97c84a5ec51cda4e9b"}, 0x48, r0) 10:54:41 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x0, 0x0, 0x1a1}, 0x48) 10:54:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:54:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000080)={0xa, 0xfffd, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="de", 0x1}, {&(0x7f0000000100)="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", 0x9b8}, {&(0x7f0000001100)="da04750d6aa8d87899d5acac2a945cb3aafc8a64a484fac3aec2c361691a904162372ef0ac1bae63ed0622c0d1a68e311aa90fd681df0322fbfab304fe6f75496a72c065db", 0x45}], 0x3}, 0x0) 10:54:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000140)="8a", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x33d00}], 0x1}, 0x0) 10:54:41 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) [ 1101.616178][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 1101.616246][ T24] audit: type=1800 audit(1655463281.665:46): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 1101.758556][ T24] audit: type=1804 audit(1655463281.695:47): pid=18673 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1242017881/syzkaller.PxlvJp/1154/file0" dev="sda1" ino=1159 res=1 errno=0 10:54:41 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 10:54:42 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 10:54:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000100)) 10:54:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000140)="8a", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x33d00}], 0x1}, 0x0) 10:54:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) [ 1102.428412][ T24] audit: type=1800 audit(1655463282.475:48): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1169 res=0 errno=0 [ 1102.593055][ T24] audit: type=1804 audit(1655463282.515:49): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2656818399/syzkaller.jTmBbk/1188/file0" dev="sda1" ino=1169 res=1 errno=0 10:54:42 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x10000) chmod(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') [ 1103.011174][ T24] audit: type=1800 audit(1655463283.055:50): pid=18708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 1103.032639][ T24] audit: type=1804 audit(1655463283.065:51): pid=18708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1242017881/syzkaller.PxlvJp/1155/file0" dev="sda1" ino=1163 res=1 errno=0 10:54:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x1}], 0x1}, 0x0) 10:54:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000140)="8a", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x33d00}], 0x1}, 0x0) 10:54:43 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 10:54:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r2}}, 0x48) 10:54:43 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:54:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000140)="8a", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x33d00}], 0x1}, 0x0) 10:54:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:44 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 10:54:44 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:54:44 executing program 1: shmget$private(0x0, 0x4000, 0x1870, &(0x7f0000ffc000/0x4000)=nil) 10:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "1162cbeafd108759"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x81}]}, 0x34}}, 0x0) 10:54:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="ac", 0x34000}], 0x1}, 0x0) 10:54:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 10:54:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540c, 0x0) 10:54:45 executing program 1: syz_open_dev$mouse(&(0x7f0000000500), 0x2, 0x201) 10:54:45 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 10:54:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) 10:54:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001840)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2}}, 0x48) 10:54:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) 10:54:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="ac", 0x1}], 0x1}, 0x40) 10:54:46 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 10:54:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001840)={0x9, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x48) 10:54:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(r0, &(0x7f0000000c80), 0x10) 10:54:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001840)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2}}, 0x48) 10:54:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001840)={0x2, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x48) 10:54:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x0, 0x2}, 0x48) 10:54:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0xd003}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 10:54:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) 10:54:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 10:54:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001840)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2}}, 0x48) 10:54:47 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000500)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 10:54:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "54a916fbdec67e949fc46a3e0d75f62747f9b8545add2648ff160d191594952ceca215bc4b25b80cd6c36917e4df3512a59c452d2a9500f2a25fc02da9bd946b"}, 0x48, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 10:54:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 10:54:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:54:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) 10:54:47 executing program 2: r0 = socket(0x1e, 0x2, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 10:54:47 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 10:54:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001840)={0x3, 0x40, 0xfa00, {{0xa, 0x4, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2}}, 0x48) 10:54:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)=""/214, &(0x7f0000000100)=0xd6) 10:54:48 executing program 0: r0 = socket(0x28, 0x2, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000180)) 10:54:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b70, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 10:54:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) 10:54:48 executing program 2: r0 = socket(0x2, 0x6, 0x0) sendmsg$netlink(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)={0xa4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x7d, 0x0, 0x0, 0x1, [@generic="dc3bdacb4ab71fadfb9ef5c209cbbb6282f54e968c1c5c0ba8f07595bc3353d16ad868f6e1a8a7ae0a5806761e5797fda25498eb0a93989b7b23e00ffa3c6a81d401c47963e0c3ca82fa605390ce60f021e97fbe8fe09e6156dc6e6b3b1cb4ca962aafba47766d315902f7f4278daa6007", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}, @generic="c906485f2f31cb8813d2dfd4f47bc26372"]}, 0xa4}, {&(0x7f0000000140)={0x178, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x165, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private2}, @generic="b67a3cd357b543c69bd16ce61c13edeade58a0c07352836faa42e5b9b23fb79851d32603a3c295ca6761a1f46940ec1b06ce53e1384bcd894cd290a33070d1edaeba2a9b6c1c921c5463fe5a507892dd7d1088438d7c301e5e6734ddaabf88a4ae53ecc36f9d8603ee9964550e3ded3575fed4a9315cc6143986ad939644f3217d11953a5951a00197ec72989e533389dc9f546245c8ffe3e9f65dec758bd2f208f4d41ae4ca4a31574463b9d4a7f56b78f4bf2ac622f30d182fcd379859a96e2e3c1e7b73c8f8204d8f7d2fddbaa938b9d291433d94c863601f5fc9ce67dee9", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="5fdcb804a413418c29473b0aa73f2a51", @generic="a1197010dbd42e658595897e7c13d393aade44b410561a9264c9a1f4170958b58dcad2e60d109301a7cc1726dc6892f291863176d74a11a23c"]}]}, 0x178}], 0x2}, 0x0) 10:54:48 executing program 4: r0 = socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 10:54:48 executing program 3: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) 10:54:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080), 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 10:54:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$phonet(r0, 0x0, 0x0) 10:54:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x0, 0x0, 0x0, 0x1004}, 0x48) 10:54:48 executing program 2: r0 = socket(0x28, 0x2, 0x0) connect$caif(r0, &(0x7f0000000000)=@dbg, 0x18) 10:54:48 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 10:54:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 10:54:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) 10:54:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_newroute={0x10, 0x18, 0x1}, 0x14}}, 0x0) 10:54:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 10:54:49 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10:54:49 executing program 4: getresgid(&(0x7f0000003e40), &(0x7f0000003e80), &(0x7f0000003ec0)) 10:54:49 executing program 5: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) 10:54:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 10:54:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 10:54:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 10:54:49 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 10:54:49 executing program 3: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="82022e777f"], 0x10) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282}, 0x10) 10:54:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) syz_clone(0x60200000, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000380), 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), 0x0) 10:54:50 executing program 0: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x400) 10:54:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0x0, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) 10:54:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="cb331ad18f86d03607e2b177e844fa", 0xf}, {&(0x7f0000000080)="20364d4c034773e2c4b1c660ea8aeb4fa6f9a7c2eca84cba793d40bad4fd7ee159", 0x21}, {&(0x7f00000000c0)="7ff3915d90274718d2ae18e5775640059518994899b6d3da5ba7aa11576fe1becd9d391f7d181cd95372817bb7a9799e7d01d6c090a3c276c4c04e5bd6360044f727beaddc9f8d3a3ec54ce1723296ab378adf858ebc32d3ef573de9745da593e584bce288c0bc2a59475f54a178c9548761f464b00601429ea7f36f4a71740161812e27527bff48c3d6317b79d9dd7c0666fed8ef2a1c", 0x97}, {&(0x7f0000000180)="c07ec8ce4c3736a11da3ac2de89915d22e703d8a73552ab16c567a1a07f9b5cd42a84824c768938db61d021e3e158328f2dccb5ec76fa69fd5895e2a6e022dd0be30387f44b610140faa5ba4fa901d9f84ef76b74fadee356180a2e545311e7f43708777801ce55fc9fa4617cea338af278d3c0d609f58e88d9efd0000048e36eecba4089a7b7ac4c285f3eb468d50224efc3f312a741b561fa4db53f17e", 0x9e}, {&(0x7f0000000240)="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", 0xb7d}], 0x5}, 0x0) recvmsg$unix(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:54:50 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x44, 0x0, 0x400, 0x0, 0x0, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x44}}, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f00000008c0)) 10:54:50 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x2, &(0x7f00000001c0)=ANY=[]) 10:54:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r0) 10:54:50 executing program 4: getresgid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000001d00)) 10:54:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) syz_clone(0x60200000, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000380), 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), 0x0) 10:54:50 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x0, 0x0, {}, {}, @rumble={0x0, 0x5}}, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x6}}}) syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x12040) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') 10:54:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000b40)={0x0, 0x0}) 10:54:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:54:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000640)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "20586c5b03b759a228c812f4c5bf1d1e81362c17ebcaca0c88f06e05d9284570e61a1950b8ef89e5dfb859d741bc969629780a41b88266f8efef9fb8e864734d211b7df48764ba06ee788c7de55479fc35de669c4555a3de60996d78d1dd3f8239bd7ad38539b16507934130890ca5bb40e5b1f40bde8359eca0ec50603501aa2d72db28b2cc75fa623f6672f99c53e6f9a992fbb4a4b7a8e8cca87f7596d3be5a3da1cbb0269cef7161b4fc3f758f615fdc3817669ee66c806615ca834af4db14b88b3ae797b9830ced245c9d5338069a00a60a7d4f480a0ec77bc7b12b6b75f505842da07b692540c2f32b077bc2cb80dd3ee243004bb398f01d7b822b6a5c"}}}, 0x128) 10:54:51 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 10:54:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x4004000, &(0x7f0000000780), 0x0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) socket$nl_generic(0x10, 0x3, 0x10) 10:54:51 executing program 0: socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:54:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x0, 0x0}) 10:54:51 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') 10:54:51 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x19, 0x1, &(0x7f0000001680)=@raw=[@jmp], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:54:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:52 executing program 5: socketpair(0x1, 0x4, 0x8000, &(0x7f0000000080)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_clone(0x60200000, &(0x7f0000000240)="73f32d21dab625c04c63727958c19460312cef04379e6795200356a14f29a3e1d75111532af6b7e4fd0069567454cdce4b368d67524aa58e4ae74ce3d94e611c0c3a1281ef4b40dcfe8faf6db620b41d264de94a6fafc7e7debe92c617416ee1420ac93ca53870fcbdb016bb1fb34a789da1fc10ff8da608c7cd526984e65c37575ef874fe1d56b18fafdb4124d1f3aab45dc6258ded45703f119526486ad26798db4df5c0ed979cbc2e5ad66e09575e585666bbc1b1864cd1177f24013d32fda9d6a49dd8282e3cc00245ce2e8deae19d", 0xd1, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8c3d95f87d") getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x8011) socket(0x1a, 0xa, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)) 10:54:52 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 10:54:52 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @broadcast}, &(0x7f0000000040)=0xc) 10:54:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) 10:54:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x0, 0x2, 0x9}, {0x7}, {0x0, 0x4f, 0x0, 0x7ff}, {0x6, 0x0, 0x0, 0x9}]}) 10:54:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) [ 1112.322568][ T24] audit: type=1326 audit(1655463292.365:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18920 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6b549 code=0x0 10:54:52 executing program 2: openat$damon_attrs(0xffffffffffffff9c, &(0x7f00000001c0), 0x204040, 0x0) 10:54:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x9}, {0x0, 0xfe, 0x0, 0x1bf}, {0x0, 0x0, 0x0, 0x7ff}, {0x6, 0x0, 0x80, 0x9}]}) 10:54:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000080)=[{r1, 0x1}, {r2}, {r0, 0x4}, {r0}, {r0, 0x1}, {r0, 0x1}], 0x6, 0x0) 10:54:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) [ 1112.802389][ T24] audit: type=1326 audit(1655463292.845:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18930 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6b549 code=0x0 10:54:53 executing program 1: ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') 10:54:53 executing program 2: socket(0x2a, 0x800, 0x0) socketpair(0x3, 0x0, 0x7, &(0x7f0000000300)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000b40)={0x6, &(0x7f0000000ac0)=[{0xa6ec}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x7b, 0x0, 0x3f}]}) 10:54:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x20000b00) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080), 0x10) 10:54:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7}, {0x0, 0x0, 0x0, 0x1bf}, {0x0, 0x0, 0x0, 0x7ff}, {0x6, 0x0, 0x0, 0x9}]}) 10:54:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000b40)={0x0, 0x0}) socketpair(0x1, 0x0, 0x8000, &(0x7f0000000080)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_clone(0x60200000, &(0x7f0000000240)="73f32d21dab625c04c63727958c19460312cef04379e6795200356a14f29a3e1d75111532af6b7e4fd0069567454cdce4b368d67524aa58e4ae74ce3d94e611c0c3a1281ef4b40dcfe8faf6db620b41d264de94a6fafc7e7debe92c617416ee1420ac93ca53870fcbdb016bb1fb34a789da1fc10ff8da608c7cd526984e65c37575ef874fe1d56b18fafdb4124d1f3aab45dc6258ded45703f119526486ad26798db4df5c0ed979cbc2e5ad66e09575e585666bbc1b1864cd1177f24013d32fda9d6a49dd8282e3cc00245ce2e8deae19d", 0xd1, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8c3d95f87d") getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x8011) socket(0x1a, 0xa, 0x0) r1 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xcd0, 0x8, 0x81, 0x5}, {0x100, 0x4, 0x8, 0x2}, {0xb7f1, 0x8, 0x20, 0x1}, {0x2, 0x6, 0x7f, 0x9}, {0xfff, 0x3f, 0x40, 0x1000}, {0x7, 0x1, 0x0, 0x80000000}, {0xb88, 0xfd, 0x71}]}) 10:54:53 executing program 1: socket(0x2a, 0x0, 0x0) socketpair(0x3, 0x0, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) 10:54:53 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') [ 1113.575012][ T24] audit: type=1326 audit(1655463293.625:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18946 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x0 10:54:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:53 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 10:54:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000208f0e120040000000000109022400010000000009040000020301000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x1, 0x0, 0x0, 'c'}, @local]}}, 0x0}, 0x0) 10:54:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:54 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) [ 1114.854777][ T3548] usb 3-1: new high-speed USB device number 62 using dummy_hcd 10:54:55 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x20000b00) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080), 0x10) 10:54:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:55 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0x7d6e69a6, 0x6}) 10:54:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:55 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) [ 1115.122178][ T3548] usb 3-1: Using ep0 maxpacket: 32 [ 1115.243169][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.254528][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.264771][ T3548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.278021][ T3548] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 1115.287578][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:54:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000a00)='net/raw6\x00') [ 1115.552995][ T3548] usb 3-1: config 0 descriptor?? 10:54:55 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) [ 1116.128656][ T3548] greenasia 0003:0E8F:0012.000D: unknown main item tag 0x0 [ 1116.173441][ T3548] greenasia 0003:0E8F:0012.000D: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 1116.185883][ T3548] greenasia 0003:0E8F:0012.000D: no inputs found [ 1116.330741][ T3548] usb 3-1: USB disconnect, device number 62 10:54:56 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, r1, 0x0, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_INTERRUPT(r2, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:54:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:56 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 10:54:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:56 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x20000b00) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080), 0x10) 10:54:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0xc020660b, 0x0) 10:54:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x5427, 0x0) 10:54:57 executing program 3: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:57 executing program 2: clock_getres(0x6, &(0x7f0000000a40)) 10:54:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:57 executing program 4: socket(0x3f, 0x0, 0x0) 10:54:57 executing program 3: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:58 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x20000b00) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080), 0x10) 10:54:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) 10:54:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 10:54:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000780)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x38) 10:54:58 executing program 3: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) 10:54:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000b40)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) getpgrp(0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x8011) syz_clone(0x4004000, &(0x7f0000000780), 0x0, &(0x7f0000000800), 0x0, 0x0) 10:54:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 10:54:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:59 executing program 1: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:59 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5427, 0x0) 10:54:59 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000b40)={0x0, 0x0}) socketpair(0x1, 0x4, 0x8000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = syz_clone(0x60200000, &(0x7f0000000240)="73f32d21dab625c04c63727958c19460312cef04379e6795200356a14f29a3e1d75111532af6b7e4fd0069567454cdce4b368d67524aa58e4ae74ce3d94e611c0c3a1281ef4b40dcfe8faf6db620b41d264de94a6fafc7e7debe92c617416ee1420ac93ca53870fcbdb016bb1fb34a789da1fc10ff8da608c7cd526984e65c37575ef874fe1d56b18fafdb4124d1f3aab45dc6258ded45703f119526486ad26798db4df5c0ed979cbc2e5ad66e09575e585666bbc1b1864cd1177f24013d32fda9d6a49dd8282e3cc00245ce2e8deae19d", 0xd1, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8c3d95f87d") getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x8011) r6 = socket(0x1a, 0xa, 0x0) r7 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) sendmsg$unix(r1, &(0x7f00000007c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11}}}], 0xf0, 0x4040000}, 0x4004090) 10:54:59 executing program 4: syz_open_dev$audion(&(0x7f00000003c0), 0x1, 0x64202) 10:54:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:59 executing program 1: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:54:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:54:59 executing program 5: syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902990003010000000904000000010100000a24010000000201020c240200000000000000000008240700000000a30c240200000000000000000005240400000904010000010200000904010101010200000905010900000000000725010000000009040200000102"], 0x0) 10:54:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 10:55:00 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000100), 0x4) 10:55:00 executing program 1: shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:00 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) [ 1120.261935][ T3548] usb 6-1: new high-speed USB device number 66 using dummy_hcd 10:55:00 executing program 4: syz_open_dev$usbmon(&(0x7f0000000340), 0x80000001, 0x0) 10:55:00 executing program 0: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000340), 0x80a01, 0xcd) [ 1120.502551][ T3548] usb 6-1: Using ep0 maxpacket: 16 [ 1120.632755][ T3548] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1120.641632][ T3548] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.654171][ T3548] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1120.665710][ T3548] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:55:01 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000b40)={0x0, 0x0}) socketpair(0x1, 0x4, 0x8000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = syz_clone(0x60200000, &(0x7f0000000240)="73f32d21dab625c04c63727958c19460312cef04379e6795200356a14f29a3e1d75111532af6b7e4fd0069567454cdce4b368d67524aa58e4ae74ce3d94e611c0c3a1281ef4b40dcfe8faf6db620b41d264de94a6fafc7e7debe92c617416ee1420ac93ca53870fcbdb016bb1fb34a789da1fc10ff8da608c7cd526984e65c37575ef874fe1d56b18fafdb4124d1f3aab45dc6258ded45703f119526486ad26798db4df5c0ed979cbc2e5ad66e09575e585666bbc1b1864cd1177f24013d32fda9d6a49dd8282e3cc00245ce2e8deae19d", 0xd1, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8c3d95f87d") getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x8011) r6 = socket(0x1a, 0xa, 0x0) r7 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) sendmsg$unix(r1, &(0x7f00000007c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r4}}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11}}}], 0xf0, 0x4040000}, 0x4004090) 10:55:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:01 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:55:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0x0, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x72, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:01 executing program 0: syz_io_uring_setup(0x3e0c, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 1121.053207][ T3548] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.062546][ T3548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.070703][ T3548] usb 6-1: Product: syz [ 1121.075148][ T3548] usb 6-1: Manufacturer: syz [ 1121.079897][ T3548] usb 6-1: SerialNumber: syz [ 1121.712986][T12512] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1121.812497][ T3548] usb 6-1: USB disconnect, device number 66 [ 1121.952690][T12512] usb 5-1: Using ep0 maxpacket: 16 10:55:02 executing program 5: syz_open_dev$audion(&(0x7f0000000180), 0x7fffffffffffffff, 0x0) 10:55:02 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000c00)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 10:55:02 executing program 0: syz_clone(0x808800, 0x0, 0x0, 0x0, 0x0, 0x0) 10:55:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) [ 1121.974791][T14015] udevd[14015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.073720][T12512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.084941][T12512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.095062][T12512] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1122.104426][T12512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:55:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 10:55:02 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/nbd3', 0x131080, 0x0) [ 1122.316833][T12512] usb 5-1: config 0 descriptor?? 10:55:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}}, 0xa0) [ 1122.564777][T19100] UDC core: couldn't find an available UDC or it's busy: -16 [ 1122.573623][T19100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1122.915109][T19100] UDC core: couldn't find an available UDC or it's busy: -16 [ 1122.923495][T19100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1122.963289][T12512] hid (null): unknown global tag 0xd [ 1122.968827][T12512] hid (null): unknown global tag 0xe [ 1123.091602][T12512] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000E/input/input15 10:55:03 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000100)="3d144bb7569eaab1da0621adc461d75871f0", 0x12, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000003c0), 0x1, 0x64202) 10:55:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 10:55:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private1, @private0, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000260}) [ 1123.237980][T12512] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000E/input/input16 [ 1123.318221][T12512] kye 0003:0458:5019.000E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 1123.434055][T12512] usb 5-1: USB disconnect, device number 8 10:55:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0x0, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x72, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000014c0)={0x2, &(0x7f0000001480)=[{0x8000, 0x3f, 0x7f, 0x7900}, {0x20, 0x80, 0x13, 0xb99}]}) 10:55:03 executing program 0: syz_clone(0x4000c200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x2, 0x300, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) 10:55:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 10:55:04 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 10:55:04 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000840)={0x8}, 0x0) 10:55:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) [ 1124.432332][T12512] usb 5-1: new high-speed USB device number 9 using dummy_hcd 10:55:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:04 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) [ 1124.682585][T12512] usb 5-1: Using ep0 maxpacket: 16 10:55:04 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) inotify_rm_watch(r0, 0x0) [ 1124.803288][T12512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.814686][T12512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.825153][T12512] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1124.834899][T12512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:55:05 executing program 0: syz_clone(0x4000c200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x2, 0x300, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) [ 1125.079356][T12512] usb 5-1: config 0 descriptor?? [ 1125.335379][T19141] UDC core: couldn't find an available UDC or it's busy: -16 [ 1125.343530][T19141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1125.622538][T19141] UDC core: couldn't find an available UDC or it's busy: -16 [ 1125.630094][T19141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1125.742375][T12512] hid (null): unknown global tag 0xd [ 1125.747909][T12512] hid (null): unknown global tag 0xe [ 1125.771396][T12512] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000F/input/input17 [ 1125.870220][T12512] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.000F/input/input18 [ 1125.949969][T12512] kye 0003:0458:5019.000F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 1126.045660][T12512] usb 5-1: USB disconnect, device number 9 10:55:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0x0, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x72, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@raw=[@exit, @alu={0x4}, @generic={0x20}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa7, &(0x7f00000000c0)=""/167, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:06 executing program 5: syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x101040) 10:55:06 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:06 executing program 2: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 10:55:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:06 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) 10:55:06 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:06 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bbd}, {{@in6=@remote}, 0x0, @in=@multicast1}}, 0xe8) 10:55:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) [ 1127.223025][ T3548] usb 5-1: new high-speed USB device number 10 using dummy_hcd 10:55:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x7ffff000}, {&(0x7f0000002200)=""/168, 0xa8}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000200000000f0ffff000000004000000000000000000000000700000089134d0a010101ac14141a7f000001ac1414aa831799ffffffffffffffffac1414aaac1e0101ac1414aa01009404000011000000000000000000000001000000000000000000000074"], 0xe8}, 0x0) [ 1127.485227][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 1127.602872][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.614123][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.626175][ T3548] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1127.635839][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.711438][ T3548] usb 5-1: config 0 descriptor?? [ 1127.956706][T19174] UDC core: couldn't find an available UDC or it's busy: -16 [ 1127.964527][T19174] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1128.204323][T19174] UDC core: couldn't find an available UDC or it's busy: -16 [ 1128.212042][T19174] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1128.262009][ T3548] hid (null): unknown global tag 0xd [ 1128.267536][ T3548] hid (null): unknown global tag 0xe [ 1128.286266][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0010/input/input19 [ 1128.388075][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0010/input/input20 [ 1128.463634][ T3548] kye 0003:0458:5019.0010: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 1128.509555][ T3548] usb 5-1: USB disconnect, device number 10 10:55:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0x0, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x72, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:09 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:09 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000900)=@framed, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x8, 0x10, 0x0}, 0x80) 10:55:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:09 executing program 2: syz_io_uring_setup(0x5968, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 10:55:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) 10:55:09 executing program 0: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0xae6]}, 0x8}) 10:55:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:09 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) 10:55:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:09 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='GPL\x00', 0x5, 0xb2, &(0x7f0000000180)=""/178, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1129.389876][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1129.396830][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 10:55:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9f}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1129.704051][ T3548] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1129.952195][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 1129.982211][T12511] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1130.079324][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.091143][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.101354][ T3548] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1130.110771][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.137865][ T3548] usb 5-1: config 0 descriptor?? [ 1130.222311][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1130.342782][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.354195][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.364446][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1130.373836][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.390289][T12511] usb 3-1: config 0 descriptor?? [ 1130.397676][T19199] UDC core: couldn't find an available UDC or it's busy: -16 [ 1130.405483][T19199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.647430][T19199] UDC core: couldn't find an available UDC or it's busy: -16 [ 1130.647719][T19208] UDC core: couldn't find an available UDC or it's busy: -16 [ 1130.655302][T19199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.662865][T19208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.712070][ T3548] hid (null): unknown global tag 0xd [ 1130.717616][ T3548] hid (null): unknown global tag 0xe [ 1130.736826][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0011/input/input21 [ 1130.827997][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0011/input/input22 [ 1130.846142][ T3548] kye 0003:0458:5019.0011: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 1130.936235][T19208] UDC core: couldn't find an available UDC or it's busy: -16 [ 1130.945990][T19208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.968494][T12512] usb 5-1: USB disconnect, device number 11 [ 1131.005301][T12511] hid (null): unknown global tag 0xd [ 1131.010865][T12511] hid (null): unknown global tag 0xe [ 1131.054122][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0012/input/input23 [ 1131.181255][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0012/input/input24 [ 1131.256429][T12511] kye 0003:0458:5019.0012: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1131.275737][T12511] usb 3-1: USB disconnect, device number 63 10:55:11 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) 10:55:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000200)=0x10) 10:55:11 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x541e, 0x0) 10:55:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 10:55:11 executing program 3: bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) 10:55:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:11 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), 0x4) 10:55:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000200)) 10:55:11 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:12 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:12 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:12 executing program 0: syz_open_dev$audion(&(0x7f0000000340), 0x0, 0x600001) 10:55:12 executing program 5: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 10:55:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000200)) [ 1132.372471][ T3548] usb 3-1: new high-speed USB device number 64 using dummy_hcd 10:55:12 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:12 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:12 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5425, 0x0) [ 1132.612165][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1132.732934][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.746075][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.756731][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1132.766049][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.895739][ T3548] usb 3-1: config 0 descriptor?? [ 1133.154888][T19228] UDC core: couldn't find an available UDC or it's busy: -16 [ 1133.162863][T19228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1133.384916][T19228] UDC core: couldn't find an available UDC or it's busy: -16 [ 1133.392742][T19228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1133.432103][ T3548] hid (null): unknown global tag 0xd [ 1133.437762][ T3548] hid (null): unknown global tag 0xe [ 1133.461178][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0013/input/input25 [ 1133.547141][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0013/input/input26 [ 1133.619132][ T3548] kye 0003:0458:5019.0013: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1133.649476][ T3548] usb 3-1: USB disconnect, device number 64 10:55:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000200)) 10:55:14 executing program 5: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 10:55:14 executing program 3: r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) 10:55:14 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x1) 10:55:14 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) 10:55:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) 10:55:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) 10:55:14 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f000016b000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 10:55:14 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) 10:55:14 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) [ 1134.792912][T12511] usb 3-1: new high-speed USB device number 65 using dummy_hcd 10:55:14 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) 10:55:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) 10:55:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 10:55:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) [ 1135.032238][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1135.152814][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.164477][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.174780][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1135.184222][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.216031][T12511] usb 3-1: config 0 descriptor?? [ 1135.457363][T19259] UDC core: couldn't find an available UDC or it's busy: -16 [ 1135.465159][T19259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1135.734715][T19259] UDC core: couldn't find an available UDC or it's busy: -16 [ 1135.742603][T19259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1135.782723][T12511] hid (null): unknown global tag 0xd [ 1135.788293][T12511] hid (null): unknown global tag 0xe [ 1135.804791][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0014/input/input27 [ 1135.830696][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0014/input/input28 [ 1135.908805][T12511] kye 0003:0458:5019.0014: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1135.991436][ T3548] usb 3-1: USB disconnect, device number 65 10:55:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:16 executing program 3: socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, 0x10) 10:55:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) 10:55:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) 10:55:16 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) 10:55:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) 10:55:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000200)=0xc) 10:55:16 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 10:55:16 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000014c0)={0x1, &(0x7f0000001480)=[{}]}) 10:55:17 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) [ 1137.072280][ T3548] usb 3-1: new high-speed USB device number 66 using dummy_hcd 10:55:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000200)=0xc) [ 1137.311911][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1137.442853][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.457814][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.468793][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1137.478222][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.626821][ T3548] usb 3-1: config 0 descriptor?? [ 1137.885697][T19294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1137.893465][T19294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1138.123884][T19294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1138.131452][T19294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1138.152374][ T3548] hid (null): unknown global tag 0xd [ 1138.157998][ T3548] hid (null): unknown global tag 0xe [ 1138.182219][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0015/input/input29 [ 1138.273771][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0015/input/input30 [ 1138.337712][ T3548] kye 0003:0458:5019.0015: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1138.359286][ T3548] usb 3-1: USB disconnect, device number 66 10:55:18 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 10:55:18 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x78, 0x33, @beacon={@wo_ht={{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x20}}, @val={0x76, 0x6}}}]}, 0x94}}, 0x0) 10:55:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000200)=0xc) 10:55:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000640)={r3, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) 10:55:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) 10:55:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, 0x0) 10:55:19 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5432, 0x0) 10:55:19 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 10:55:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 10:55:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 10:55:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, 0x0) 10:55:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_setup(0x5968, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x315}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) 10:55:19 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) 10:55:19 executing program 0: r0 = syz_clone(0x20000400, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)="93f5b2d6ead92bff11f645abc0c91910ee97149fa38f95a4cc4ccb5a8c39a06b4e77a9b59881c606c412a8d5fe52885b59a6bd24c1620e9f") kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) [ 1139.524551][ T3548] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1139.778435][ T3548] usb 3-1: Using ep0 maxpacket: 16 10:55:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev}]}, 0x0) 10:55:20 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) [ 1139.912452][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.924173][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.934278][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1139.943677][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.143692][ T3548] usb 3-1: config 0 descriptor?? [ 1140.385249][T19321] UDC core: couldn't find an available UDC or it's busy: -16 [ 1140.393861][T19321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1140.655151][T19321] UDC core: couldn't find an available UDC or it's busy: -16 [ 1140.662989][T19321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1140.732390][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 1140.738721][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 1140.758201][ T3548] usb 3-1: USB disconnect, device number 67 10:55:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) 10:55:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) 10:55:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) 10:55:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, 0x0, 0x0) 10:55:21 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x5432, 0x0) 10:55:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) 10:55:21 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@empty}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40085) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 10:55:21 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x1f, 0x0) bind$rxrpc(r0, 0x0, 0x0) 10:55:21 executing program 0: syz_read_part_table(0x3f, 0x7, &(0x7f0000002540)=[{0x0, 0x0, 0xfff}, {&(0x7f00000000c0)="c89305206383052edf576b7386232db5bd2a2ad4107076c7e1dad3de6e7df292ad0da79dc585bfffea16abb49497eecb3085936414ee3469411892f1e9cc527d4e75770a82d7cecf807f6613f0b71c85b38d2ec1fbae7ec44e841c7ad354610832a17486764b753eb35134d9df8389d1130f61ad7f3befade78bf422d9fdef27efc5effb3d1cf3dae8275d77d6178164a526837b8565df33269e0210c9", 0x9d, 0x7}, {&(0x7f00000001c0)="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", 0x755, 0x6}, {&(0x7f00000012c0), 0x0, 0x8000000000000001}, {0x0, 0x0, 0x800000000000001}, {0x0}, {&(0x7f0000002440)="9ebd1e85c1622de209730033909943", 0xf, 0xf5}]) 10:55:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 10:55:21 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@mcast2}, &(0x7f0000000240)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8490}, 0x0) [ 1141.761986][ T3548] usb 3-1: new high-speed USB device number 68 using dummy_hcd 10:55:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="03"], 0x18}}, 0x0) [ 1142.012321][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1142.144085][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.155635][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.167598][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1142.177195][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.338404][ T3548] usb 3-1: config 0 descriptor?? [ 1142.585301][T19357] UDC core: couldn't find an available UDC or it's busy: -16 [ 1142.593158][T19357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1142.829280][T19357] UDC core: couldn't find an available UDC or it's busy: -16 [ 1142.837178][T19357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1142.918580][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 1142.925920][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 1142.947472][ T3548] usb 3-1: USB disconnect, device number 68 10:55:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) 10:55:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, 0x0, 0x0) 10:55:23 executing program 0: syz_io_uring_setup(0x5968, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x315}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 10:55:23 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@empty}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40085) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 10:55:23 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@mcast2}, &(0x7f0000000240)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8490}, 0x0) 10:55:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:23 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) 10:55:23 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 10:55:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:23 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@empty}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40085) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 10:55:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, 0x0, 0x0) [ 1143.942136][ T3548] usb 3-1: new high-speed USB device number 69 using dummy_hcd 10:55:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) [ 1144.212275][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1144.333276][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.344633][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.354869][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1144.364252][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.491686][ T3548] usb 3-1: config 0 descriptor?? [ 1144.742181][T19386] UDC core: couldn't find an available UDC or it's busy: -16 [ 1144.749817][T19386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1144.990472][T19386] UDC core: couldn't find an available UDC or it's busy: -16 [ 1144.998385][T19386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1145.082432][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 1145.088971][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 1145.099927][ T3548] usb 3-1: USB disconnect, device number 69 10:55:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:25 executing program 0: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={0x65f6}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0xae6]}, 0x8}) 10:55:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:25 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) 10:55:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 10:55:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in6=@private1}, 0x0, @in6=@local}}, 0xe8) 10:55:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000180)=0x400, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400, 0x4], [0x100, 0x7ff, 0x80000001, 0x0, 0x80000100000000, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x9, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x0, 0xb4, 0x4, 0x101, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x7ff, 0x0, 0x9, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x622, 0xa0, 0x0, 0x4, 0x5, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x6, 0xfffffffffffffffa, 0x0, 0x200, 0x1ff, 0x0, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x0, 0x101, 0x2, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000, 0x41, 0x8, 0x3, 0x2, 0x7, 0x5, 0x0, 0x800, 0x4, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000280)={r4, "93f72f776f188f10bc2ef8f2b4bc9991"}) 10:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) 10:55:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) [ 1146.092621][T12511] usb 3-1: new high-speed USB device number 70 using dummy_hcd 10:55:26 executing program 0: syz_open_dev$audion(&(0x7f0000000840), 0x1, 0x20002) [ 1146.334923][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1146.453138][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.464326][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.474440][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1146.483791][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.645219][T12511] usb 3-1: config 0 descriptor?? [ 1146.891504][T19412] UDC core: couldn't find an available UDC or it's busy: -16 [ 1146.899605][T19412] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1147.215927][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0016/input/input32 [ 1147.297801][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0016/input/input33 [ 1147.390323][T12511] kye 0003:0458:5019.0016: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1147.421412][T12511] usb 3-1: USB disconnect, device number 70 10:55:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:27 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000000e00)) 10:55:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000014c0)={0x3, &(0x7f0000001480)=[{0x20}, {}, {}]}) 10:55:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, 0x0, 0x0) 10:55:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x81}, 0x1c) 10:55:28 executing program 3: getitimer(0x0, &(0x7f0000000500)) 10:55:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "1dff7e"}) 10:55:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:28 executing program 1: futex(&(0x7f0000000580), 0xb, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, 0x0, 0x0) [ 1148.532588][T12511] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1148.782307][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1148.902851][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.914197][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.926197][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1148.935819][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.975837][T12511] usb 3-1: config 0 descriptor?? [ 1149.224382][T19437] UDC core: couldn't find an available UDC or it's busy: -16 [ 1149.232230][T19437] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.508137][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0017/input/input34 [ 1149.603871][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0017/input/input35 [ 1149.669360][T12511] kye 0003:0458:5019.0017: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1149.705360][T12511] usb 3-1: USB disconnect, device number 71 10:55:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5401, 0x0) 10:55:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, @private2, @empty}}) 10:55:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r3, &(0x7f0000002cc0), 0x1a3, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:55:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[], [{@smackfsdef={'smackfsdef', 0x3d, '!]#*\'/#'}}]}) 10:55:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007ac0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) 10:55:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bbe}, {{@in6=@private1}, 0x0, @in6=@local}}, 0xe8) 10:55:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5407, 0x0) [ 1150.572083][ T3548] Bluetooth: hci0: command 0x0401 tx timeout [ 1150.872893][T12511] usb 3-1: new high-speed USB device number 72 using dummy_hcd 10:55:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:31 executing program 3: close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x6, 0x81, 0x10000, 0x0, 0xffffffffffffffff, 0x9}, 0x48) [ 1151.114652][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1151.254033][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.265281][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.275371][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1151.285261][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.404621][T12511] usb 3-1: config 0 descriptor?? [ 1151.644951][T19463] UDC core: couldn't find an available UDC or it's busy: -16 [ 1151.653216][T19463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1151.792284][ T3548] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1151.944017][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0018/input/input36 [ 1152.027724][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0018/input/input37 [ 1152.032308][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 1152.167245][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.167918][T12511] kye 0003:0458:5019.0018: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1152.179197][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.200549][T12511] usb 3-1: USB disconnect, device number 72 [ 1152.208172][ T3548] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1152.217810][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.234027][ T3548] usb 5-1: config 0 descriptor?? [ 1152.487876][T19477] UDC core: couldn't find an available UDC or it's busy: -16 [ 1152.495872][T19477] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:55:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:32 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 10:55:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x5}, 0x48) 10:55:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0x4, 0x0}, &(0x7f0000000100)="a8928c2152bf", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:32 executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x335, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xdd, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x8b0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8c}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "bfb755c744a867b584d2a2de9b4aaaf8"}]}}) [ 1152.752895][ T3548] hid (null): unknown global tag 0xd [ 1152.758720][ T3548] hid (null): unknown global tag 0xe 10:55:32 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) socket$nl_audit(0x10, 0x3, 0x9) 10:55:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) [ 1152.881066][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0019/input/input38 [ 1152.983106][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5019.0019/input/input39 [ 1153.125518][ T3548] kye 0003:0458:5019.0019: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 1153.233673][T12516] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1153.275122][ T3548] usb 5-1: USB disconnect, device number 12 [ 1153.342339][T12511] usb 4-1: new high-speed USB device number 75 using dummy_hcd 10:55:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000012c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1153.472411][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1153.634905][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.646276][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.656489][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1153.656685][T12511] usb 4-1: Using ep0 maxpacket: 16 [ 1153.665868][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:55:33 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xa2, &(0x7f0000000140)=""/162, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x0, 0x0, 0x0, 0x1008}, 0x48) [ 1153.839503][T12516] usb 3-1: config 0 descriptor?? [ 1153.853378][T12511] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 1154.053184][T12511] usb 4-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40 [ 1154.062815][T12511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.071082][T12511] usb 4-1: Product: syz [ 1154.075667][T12511] usb 4-1: Manufacturer: syz [ 1154.080506][T12511] usb 4-1: SerialNumber: syz [ 1154.089185][T19488] UDC core: couldn't find an available UDC or it's busy: -16 [ 1154.099181][T19488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1154.218859][T19488] UDC core: couldn't find an available UDC or it's busy: -16 [ 1154.226846][T19488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1154.592230][T12516] usbhid 3-1:0.0: can't add hid device: -71 [ 1154.598710][T12516] usbhid: probe of 3-1:0.0 failed with error -71 [ 1154.610498][T12516] usb 3-1: USB disconnect, device number 73 [ 1154.612523][T12511] usbhid 4-1:1.0: can't add hid device: -71 [ 1154.623099][T12511] usbhid: probe of 4-1:1.0 failed with error -71 [ 1154.654045][T12511] usb 4-1: USB disconnect, device number 75 10:55:35 executing program 1: futex(&(0x7f0000000580), 0xb, 0x0, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600), 0x0) 10:55:35 executing program 0: syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x4, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c892c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f0a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @remote}]}}}}}}}}, 0x0) 10:55:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:35 executing program 4: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$audion(&(0x7f0000000040), 0x55b, 0xc000) 10:55:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000008}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:35 executing program 3: socket$inet(0x2, 0x0, 0xffff) 10:55:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @loopback}, @phonet, @phonet}) 10:55:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 10:55:35 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) socket$nl_audit(0x10, 0x3, 0x9) 10:55:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000200)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:35 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000200), 0x648000, 0x0) 10:55:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) [ 1155.602354][T12516] usb 3-1: new high-speed USB device number 74 using dummy_hcd 10:55:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, 0x0, 0x0) 10:55:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) shutdown(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1155.842179][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1155.963275][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.974743][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.986714][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1155.996753][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.136505][T12516] usb 3-1: config 0 descriptor?? [ 1156.386173][T19515] UDC core: couldn't find an available UDC or it's busy: -16 [ 1156.396035][T19515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1156.438412][T19515] UDC core: couldn't find an available UDC or it's busy: -16 [ 1156.446968][T19515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1156.752346][T12516] usbhid 3-1:0.0: can't add hid device: -71 [ 1156.758768][T12516] usbhid: probe of 3-1:0.0 failed with error -71 [ 1156.770552][T12516] usb 3-1: USB disconnect, device number 74 10:55:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:37 executing program 4: syz_io_uring_setup(0x11e9, &(0x7f0000000000)={0x0, 0x44bf, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 10:55:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private1}, 0x2, @in6=@local}}, 0xe8) 10:55:37 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 10:55:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000001c0)) syz_clone(0x4000c200, &(0x7f0000000040), 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000200)="777b5e9021bc8dc2ade8d2bc0aff6106d3a3dd2f2200e4e320597c6797122df772551a7b44f7913651cddc5a7700a85843a264e517d47635ffca8babe8084dbc3ac94066e0b0e72ca8051bcbe4c1b2a996d32b5ba97adfe3fc2ec1143e0bf425e2f0ecfded87ec1de7d98dc3ea35fb66e8621d734c882b6000"/133) socketpair(0x10, 0x2, 0x300, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000300)={r1}) 10:55:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, @in={0x2, 0x0, @dev}], 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:37 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000030000000100001037770616e3100000003"], 0x40}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001600), r0) 10:55:37 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, 0x7ffffff7, @private0}, 0x1c, 0x0}}], 0x1, 0x0) 10:55:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 10:55:37 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) [ 1157.762458][T12516] usb 3-1: new high-speed USB device number 75 using dummy_hcd 10:55:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1158.003232][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1158.122824][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.136228][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.146642][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1158.156089][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.202342][T12516] usb 3-1: config 0 descriptor?? [ 1158.464672][T19545] UDC core: couldn't find an available UDC or it's busy: -16 [ 1158.472665][T19545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1158.513572][T19545] UDC core: couldn't find an available UDC or it's busy: -16 [ 1158.521305][T19545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1158.832236][T12516] usbhid 3-1:0.0: can't add hid device: -71 [ 1158.838673][T12516] usbhid: probe of 3-1:0.0 failed with error -71 [ 1158.877133][T12516] usb 3-1: USB disconnect, device number 75 10:55:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:39 executing program 1: syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[{@uid_forget}]}) 10:55:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) 10:55:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000001c0)) syz_clone(0x4000c200, &(0x7f0000000040), 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000200)="777b5e9021bc8dc2ade8d2bc0aff6106d3a3dd2f2200e4e320597c6797122df772551a7b44f7913651cddc5a7700a85843a264e517d47635ffca8babe8084dbc3ac94066e0b0e72ca8051bcbe4c1b2a996d32b5ba97adfe3fc2ec1143e0bf425e2f0ecfded87ec1de7d98dc3ea35fb66e8621d734c882b6000"/133) socketpair(0x10, 0x2, 0x300, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000300)={r1}) 10:55:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000180)=""/112, 0x70) 10:55:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1159.406967][ T24] audit: type=1326 audit(1655463339.455:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19561 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7e549 code=0x0 [ 1159.499722][T19567] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1159.507617][T19567] UDF-fs: Scanning with blocksize 512 failed [ 1159.569351][T19567] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1159.577569][T19567] UDF-fs: Scanning with blocksize 1024 failed 10:55:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f00000000000040e1ff"]) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000000), 0x18) 10:55:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1159.654487][T19567] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1159.662292][T19567] UDF-fs: Scanning with blocksize 2048 failed 10:55:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5460, 0x0) [ 1159.698355][T19567] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1159.706123][T19567] UDF-fs: Scanning with blocksize 4096 failed 10:55:39 executing program 1: syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[{@uid_forget}]}) [ 1159.962306][T12511] usb 3-1: new high-speed USB device number 76 using dummy_hcd 10:55:40 executing program 3: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xeef, 0xa001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x0, 0x1f, 0x1, {0x22, 0x23d}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xff}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x0, 0x8, 0x6, 0x10, 0xe0}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x38, &(0x7f00000009c0)=@string={0x38, 0x3, "20f01557fbcaecdcb684ca7c35c8b97162f69f6a9a3833a9517b713620a5438a6df00bff1a09e5da39866f5a2f3936dfb78391f35538"}}, {0x0, 0x0}]}) 10:55:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1160.232161][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1160.362421][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.373984][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.385920][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1160.395638][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.409033][T19584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1160.417506][T19584] UDF-fs: Scanning with blocksize 512 failed [ 1160.480977][T12511] usb 3-1: config 0 descriptor?? [ 1160.511163][T19584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1160.519272][T19584] UDF-fs: Scanning with blocksize 1024 failed [ 1160.593508][T19584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1160.601239][T19584] UDF-fs: Scanning with blocksize 2048 failed [ 1160.644348][T19584] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1160.652464][T19584] UDF-fs: Scanning with blocksize 4096 failed [ 1160.783210][ T3548] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1160.965203][T19574] UDC core: couldn't find an available UDC or it's busy: -16 [ 1160.973403][T19574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1161.142172][ T3548] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1161.222892][ T3548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.233088][ T3548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 1161.272392][T12511] usbhid 3-1:0.0: can't add hid device: -71 [ 1161.278744][T12511] usbhid: probe of 3-1:0.0 failed with error -71 [ 1161.331932][T12511] usb 3-1: USB disconnect, device number 76 [ 1161.482497][ T3548] usb 4-1: string descriptor 0 read error: -22 [ 1161.489069][ T3548] usb 4-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 1161.498558][ T3548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.533294][T19586] raw-gadget gadget: fail, usb_ep_enable returned -22 10:55:41 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:41 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xd, 0x0, 0x7) 10:55:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f00000000000040e1ff"]) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000000), 0x18) 10:55:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 10:55:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x5, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000100), 0x0, 0x10001}, {0x0}, {&(0x7f00000002c0), 0x0, 0x100000000}, {0x0}], 0x0, &(0x7f00000004c0)={[{@huge_always}, {@size={'size', 0x3d, [0x6b, 0x0]}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_advise}, {@gid={'gid', 0x3d, 0xee01}}], [{@context={'context', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x17}}]}) [ 1161.836480][T19595] loop1: detected capacity change from 0 to 256 [ 1161.872606][ T3548] usbhid 4-1:1.0: can't add hid device: -71 [ 1161.878951][ T3548] usbhid: probe of 4-1:1.0 failed with error -71 10:55:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1161.973271][ T3548] usb 4-1: USB disconnect, device number 76 10:55:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000026c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0xfffffff) 10:55:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe0101, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) [ 1162.366045][T12511] usb 3-1: new high-speed USB device number 77 using dummy_hcd 10:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:55:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) [ 1162.466742][T19606] loop4: detected capacity change from 0 to 264192 [ 1162.555618][T19606] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value 10:55:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r1}, 0x38) [ 1162.613160][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1162.754258][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.754426][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.754593][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1162.754733][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.761140][T12511] usb 3-1: config 0 descriptor?? [ 1163.215098][T19600] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.225249][T19600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.672258][T12511] usbhid 3-1:0.0: can't add hid device: -71 [ 1163.678710][T12511] usbhid: probe of 3-1:0.0 failed with error -71 [ 1163.740284][T12511] usb 3-1: USB disconnect, device number 77 10:55:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 10:55:44 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) 10:55:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000026c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0xffffff0f00000000) 10:55:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1164.233417][T19628] sp0: Synchronizing with TNC [ 1164.248095][T19629] loop1: detected capacity change from 0 to 264192 10:55:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe0101, 0x0) write$FUSE_INIT(r3, &(0x7f0000000680)={0x50}, 0x50) read$FUSE(r3, 0x0, 0x0) dup3(r0, r1, 0x0) [ 1164.398042][T19629] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 10:55:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 10:55:44 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:55:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:44 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) [ 1164.816432][T19643] sp0: Synchronizing with TNC 10:55:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) [ 1164.821653][T12511] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1165.082042][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1165.203087][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.214451][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.224675][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1165.234018][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.361605][T12511] usb 3-1: config 0 descriptor?? [ 1165.844060][T19636] UDC core: couldn't find an available UDC or it's busy: -16 [ 1165.851543][T19636] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1166.122275][T12511] usbhid 3-1:0.0: can't add hid device: -71 [ 1166.128658][T12511] usbhid: probe of 3-1:0.0 failed with error -71 [ 1166.143693][T12511] usb 3-1: USB disconnect, device number 78 10:55:46 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:46 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff0000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) 10:55:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 10:55:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1166.765759][T19661] sp0: Synchronizing with TNC 10:55:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGIFHWADDR(r0, 0x8912, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 10:55:46 executing program 1: r0 = syz_clone(0x20000400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="93f5b2d6ead92bff11f645abc0c91910ee97149fa38f95a4cc4ccb5a8c39a06b4e77a9b59881c606c412") kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 10:55:46 executing program 0: syz_clone(0x16021100, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="e4") 10:55:47 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) dup3(r1, r0, 0x0) 10:55:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 1167.272303][T17885] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1167.460288][T19677] sp0: Synchronizing with TNC [ 1167.474670][T17885] usb 3-1: device descriptor read/64, error 18 [ 1167.630746][T19680] loop4: detected capacity change from 0 to 264192 [ 1167.696387][T19680] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1167.742226][T17885] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1167.931963][T17885] usb 3-1: device descriptor read/64, error 18 [ 1168.052559][T17885] usb usb3-port1: attempt power cycle [ 1168.472088][T17885] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1168.589736][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1168.752177][T17885] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1168.862283][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1168.868198][T17885] usb usb3-port1: unable to enumerate USB device 10:55:49 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="017fffffff000000000001000000180001801400020073697430"], 0x2c}}, 0x0) 10:55:49 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000001280)=""/167, 0xa7}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x20, &(0x7f00000015c0)={&(0x7f00000013c0)=""/201, 0xc9, 0x0, &(0x7f00000014c0)=""/227, 0xe3}}, 0x10) r0 = syz_clone(0x50002000, &(0x7f0000000000)="22fc14b7300f06ff453cadcd7bc0369d20e1c845dc38fc00148ef8ada73ec6a8bdeb927caa25bb107c018cd08b9feeb2b63b16c1de73316bb98dafe31bf912939e4091d170b257935a7692b76624ef3c85740b159d4f03cc395d6b2c7f13297f7a45ce3fae88ea66052cc2881e22f0cd48e3073f5c2165ff35621684f36bfafafb5f2c8405ddc26e5d2e479c4a7f44d5764e1ccfe7333c7260022d1ab8873c6f9d7112dd2499dabe6bc3303cedb08f4c08ccf4f362d0692a2b7032fa117da0d71bd003e7a576e65399932a8623b468d04b04d73fb74fdc690c0420ff01544c2efb11551881efe548", 0xe8, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b7943ed549c587ff69963530688bf40aa05558a1db0a9db2be60d0b25ab682fc693f2b855a073ae7bd901947f6f29999d461975eb889c25fda12eb1e3e540f0f7ee37f79f8af95bd8fc200208238c2ae7db0b463c052bd63f2c1bc7f4d175dcd28fb6d65e4789ef4b90166fc659a7c000d571715fcbf1c76e8695472e2b856879ce8d8c404") syz_open_procfs$namespace(r0, 0x0) 10:55:49 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 10:55:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:55:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 1169.965242][T19688] sp0: Synchronizing with TNC [ 1170.008327][T19691] loop4: detected capacity change from 0 to 264192 10:55:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:55:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:50 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 1170.509261][T19691] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1170.523788][T17885] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1170.549782][T19700] sp0: Synchronizing with TNC 10:55:50 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000030003b0500000000000000000000000058000100540001000b00010073696d706c65000028000280180002"], 0x6c}}, 0x0) 10:55:50 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000001280)=""/167, 0xa7}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x20, &(0x7f00000015c0)={&(0x7f00000013c0)=""/201, 0xc9, 0x0, &(0x7f00000014c0)=""/227, 0xe3}}, 0x10) r0 = syz_clone(0x50002000, &(0x7f0000000000)="22fc14b7300f06ff453cadcd7bc0369d20e1c845dc38fc00148ef8ada73ec6a8bdeb927caa25bb107c018cd08b9feeb2b63b16c1de73316bb98dafe31bf912939e4091d170b257935a7692b76624ef3c85740b159d4f03cc395d6b2c7f13297f7a45ce3fae88ea66052cc2881e22f0cd48e3073f5c2165ff35621684f36bfafafb5f2c8405ddc26e5d2e479c4a7f44d5764e1ccfe7333c7260022d1ab8873c6f9d7112dd2499dabe6bc3303cedb08f4c08ccf4f362d0692a2b7032fa117da0d71bd003e7a576e65399932a8623b468d04b04d73fb74fdc690c0420ff01544c2efb11551881efe548", 0xe8, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b7943ed549c587ff69963530688bf40aa05558a1db0a9db2be60d0b25ab682fc693f2b855a073ae7bd901947f6f29999d461975eb889c25fda12eb1e3e540f0f7ee37f79f8af95bd8fc200208238c2ae7db0b463c052bd63f2c1bc7f4d175dcd28fb6d65e4789ef4b90166fc659a7c000d571715fcbf1c76e8695472e2b856879ce8d8c404") syz_open_procfs$namespace(r0, 0x0) 10:55:50 executing program 4: syz_clone(0xc642680, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1170.762281][T17885] usb 3-1: device descriptor read/64, error 18 [ 1171.032036][T17885] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1171.133387][T19706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1171.145669][T19706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1171.155796][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1171.242369][T17885] usb 3-1: device descriptor read/64, error 18 [ 1171.373647][T17885] usb usb3-port1: attempt power cycle [ 1171.801946][T17885] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1171.922610][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1172.071918][T17885] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1172.162548][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1172.168569][T17885] usb usb3-port1: unable to enumerate USB device 10:55:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:55:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect(r0, &(0x7f0000000140)=@phonet, 0x80) 10:55:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x401c5820, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file1\x00'}) 10:55:53 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000001280)=""/167, 0xa7}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x20, &(0x7f00000015c0)={&(0x7f00000013c0)=""/201, 0xc9, 0x0, &(0x7f00000014c0)=""/227, 0xe3}}, 0x10) r0 = syz_clone(0x50002000, &(0x7f0000000000)="22fc14b7300f06ff453cadcd7bc0369d20e1c845dc38fc00148ef8ada73ec6a8bdeb927caa25bb107c018cd08b9feeb2b63b16c1de73316bb98dafe31bf912939e4091d170b257935a7692b76624ef3c85740b159d4f03cc395d6b2c7f13297f7a45ce3fae88ea66052cc2881e22f0cd48e3073f5c2165ff35621684f36bfafafb5f2c8405ddc26e5d2e479c4a7f44d5764e1ccfe7333c7260022d1ab8873c6f9d7112dd2499dabe6bc3303cedb08f4c08ccf4f362d0692a2b7032fa117da0d71bd003e7a576e65399932a8623b468d04b04d73fb74fdc690c0420ff01544c2efb11551881efe548", 0xe8, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b7943ed549c587ff69963530688bf40aa05558a1db0a9db2be60d0b25ab682fc693f2b855a073ae7bd901947f6f29999d461975eb889c25fda12eb1e3e540f0f7ee37f79f8af95bd8fc200208238c2ae7db0b463c052bd63f2c1bc7f4d175dcd28fb6d65e4789ef4b90166fc659a7c000d571715fcbf1c76e8695472e2b856879ce8d8c404") syz_open_procfs$namespace(r0, 0x0) 10:55:53 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1173.309895][T19721] sp0: Synchronizing with TNC 10:55:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = dup(r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9f04275ab375a2dde2c5cf6530cf50d760149b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)) 10:55:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 10:55:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) [ 1173.803006][ T3548] usb 3-1: new high-speed USB device number 87 using dummy_hcd 10:55:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) 10:55:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = dup(r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9f04275ab375a2dde2c5cf6530cf50d760149b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)) 10:55:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) [ 1173.992045][ T3548] usb 3-1: device descriptor read/64, error 18 10:55:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) [ 1174.272395][ T3548] usb 3-1: new high-speed USB device number 88 using dummy_hcd 10:55:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:54 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000001280)=""/167, 0xa7}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x20, &(0x7f00000015c0)={&(0x7f00000013c0)=""/201, 0xc9, 0x0, &(0x7f00000014c0)=""/227, 0xe3}}, 0x10) r0 = syz_clone(0x50002000, &(0x7f0000000000)="22fc14b7300f06ff453cadcd7bc0369d20e1c845dc38fc00148ef8ada73ec6a8bdeb927caa25bb107c018cd08b9feeb2b63b16c1de73316bb98dafe31bf912939e4091d170b257935a7692b76624ef3c85740b159d4f03cc395d6b2c7f13297f7a45ce3fae88ea66052cc2881e22f0cd48e3073f5c2165ff35621684f36bfafafb5f2c8405ddc26e5d2e479c4a7f44d5764e1ccfe7333c7260022d1ab8873c6f9d7112dd2499dabe6bc3303cedb08f4c08ccf4f362d0692a2b7032fa117da0d71bd003e7a576e65399932a8623b468d04b04d73fb74fdc690c0420ff01544c2efb11551881efe548", 0xe8, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b7943ed549c587ff69963530688bf40aa05558a1db0a9db2be60d0b25ab682fc693f2b855a073ae7bd901947f6f29999d461975eb889c25fda12eb1e3e540f0f7ee37f79f8af95bd8fc200208238c2ae7db0b463c052bd63f2c1bc7f4d175dcd28fb6d65e4789ef4b90166fc659a7c000d571715fcbf1c76e8695472e2b856879ce8d8c404") syz_open_procfs$namespace(r0, 0x0) 10:55:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = dup(r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9f04275ab375a2dde2c5cf6530cf50d760149b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)) [ 1174.492968][ T3548] usb 3-1: device descriptor read/64, error 18 [ 1174.620666][ T3548] usb usb3-port1: attempt power cycle [ 1175.032043][ T3548] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1175.122985][ T3548] usb 3-1: Invalid ep0 maxpacket: 0 [ 1175.282952][ T3548] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1175.383030][ T3548] usb 3-1: Invalid ep0 maxpacket: 0 [ 1175.389048][ T3548] usb usb3-port1: unable to enumerate USB device 10:55:56 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = dup(r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9f04275ab375a2dde2c5cf6530cf50d760149b"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)) 10:55:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r1}, 0x38) 10:55:56 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) 10:55:56 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 10:55:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 10:55:56 executing program 5: io_setup(0x7, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/tcp\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 10:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000001980)) 10:55:57 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) [ 1177.122582][T17885] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1177.322001][T17885] usb 3-1: device descriptor read/64, error 18 [ 1177.592193][T17885] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1177.812085][T17885] usb 3-1: device descriptor read/64, error 18 [ 1177.932719][T17885] usb usb3-port1: attempt power cycle [ 1178.341917][T17885] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1178.452334][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1178.612963][T17885] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1178.722238][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1178.728175][T17885] usb usb3-port1: unable to enumerate USB device 10:55:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:55:59 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) setxattr$security_ima(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 10:55:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:55:59 executing program 5: syz_emit_ethernet(0x11, &(0x7f0000000100)={@link_local, @remote, @void, {@llc={0x4, {@llc={0x0, 0x0, "f3"}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {}, {@loopback}, {@local}, {@broadcast}]}, @lsrr={0x83, 0x13, 0x0, [@private, @multicast1, @loopback, @dev]}]}}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 10:55:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0xf1, &(0x7f0000000100)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:55:59 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 10:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:00 executing program 5: syz_clone3(&(0x7f0000000100)={0x103a4400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 10:56:00 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2200000000000000, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@session}, {@check_strict}]}) 10:56:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) [ 1180.342247][T12511] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1180.532547][T12511] usb 3-1: device descriptor read/64, error 18 [ 1180.619923][T19799] ISOFS: Unable to identify CD-ROM format. [ 1180.802695][T12511] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1180.992955][T12511] usb 3-1: device descriptor read/64, error 18 [ 1181.112380][T12511] usb usb3-port1: attempt power cycle [ 1181.522081][T12511] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1181.622307][T12511] usb 3-1: Invalid ep0 maxpacket: 0 [ 1181.772143][T12511] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1181.884664][T12511] usb 3-1: Invalid ep0 maxpacket: 0 [ 1181.892575][T12511] usb usb3-port1: unable to enumerate USB device 10:56:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000040)=""/161, 0x26, 0xa1, 0x1}, 0x20) 10:56:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x11, 0x67, 0x0, &(0x7f0000001980)) 10:56:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:03 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@session, 0x34}]}) 10:56:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, &(0x7f0000001980)) 10:56:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x37, 0x0, &(0x7f0000001980)) 10:56:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:03 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x210020, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x406, 0x0) [ 1183.542546][T17885] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1183.736882][T17885] usb 3-1: device descriptor read/64, error 18 [ 1184.022511][T17885] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1184.212079][T17885] usb 3-1: device descriptor read/64, error 18 [ 1184.332354][T17885] usb usb3-port1: attempt power cycle [ 1184.742005][T17885] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1184.832432][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1184.982045][T17885] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1185.075118][T17885] usb 3-1: Invalid ep0 maxpacket: 0 [ 1185.080843][T17885] usb usb3-port1: unable to enumerate USB device 10:56:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:06 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000002140)={0x78, 0x0, r1, {0x7}}, 0x78) 10:56:06 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x4}, 0x18) 10:56:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc020000}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x4a, 0x0, &(0x7f0000001980)) 10:56:06 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001440)={0x420}, 0x420}}, 0x0) 10:56:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1a, 0x0, &(0x7f0000001980)) 10:56:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) [ 1186.791998][T17885] usb 3-1: new high-speed USB device number 103 using dummy_hcd 10:56:06 executing program 0: shmctl$SHM_STAT(0x0, 0x2, 0x0) [ 1186.983072][T17885] usb 3-1: device descriptor read/64, error 18 [ 1187.253716][T17885] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1187.444927][T17885] usb 3-1: device descriptor read/64, error 18 [ 1187.562595][T17885] usb usb3-port1: attempt power cycle [ 1187.972245][T17885] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1188.152275][T17885] usb 3-1: device descriptor read/8, error -61 [ 1188.422178][T17885] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1188.602380][T17885] usb 3-1: device descriptor read/8, error -61 [ 1188.732575][T17885] usb usb3-port1: unable to enumerate USB device 10:56:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000001980)) 10:56:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:09 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x1f, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, '%'}}, 0xff59) write$P9_RLERRORu(r0, 0x0, 0x1b) 10:56:09 executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x2760, &(0x7f0000000740)={0x0, 0x968a}) 10:56:09 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/crypto\x00', 0x0, 0x0) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0xf3}, 0x0) 10:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getae={0x40, 0x1f, 0x826df5c19471e6ad, 0x0, 0x0, {{@in=@dev}, @in6=@private2}}, 0x40}}, 0x0) 10:56:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac}, {0x6}]}) 10:56:10 executing program 5: r0 = socket(0x2, 0x3, 0x4) connect$packet(r0, 0x0, 0x1000000) [ 1190.051653][ T24] audit: type=1326 audit(1655463370.095:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19870 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7e549 code=0x0 [ 1190.075079][T17885] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1190.272238][T17885] usb 3-1: device descriptor read/64, error 18 [ 1190.548913][T17885] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1190.742206][T17885] usb 3-1: device descriptor read/64, error 18 [ 1190.828963][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.835736][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.865376][T17885] usb usb3-port1: attempt power cycle [ 1191.292163][T17885] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1191.482417][T17885] usb 3-1: device descriptor read/8, error -61 [ 1191.762125][T17885] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1191.932249][T17885] usb 3-1: device descriptor read/8, error -61 [ 1192.062702][T17885] usb usb3-port1: unable to enumerate USB device 10:56:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 10:56:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)="da", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 10:56:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0xc0}}, 0x0) 10:56:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getae={0x14, 0x1f, 0x826df5c19471e6ad, 0x0, 0x0, {{@in6=@local}, @in=@empty}, [@address_filter={0x3, 0x1a, {@in=@multicast2, @in=@loopback}}]}, 0x68}}, 0x0) 10:56:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$dupfd(r0, 0x40b, 0xffffffffffffffff) 10:56:13 executing program 4: capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0xe4fe}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) 10:56:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) writev(r3, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000340)="2d3ae6eb8186bd07f5f002d97b9433274d52ad7c66ba6d54819da3c298fb9a46cace319434dbeb7ed4327831367a7562cccbb88a31e1b4498bbee9689399d7c6aecce2ba80c546ae44b5980f6d7554554422f0ab", 0x54}, {&(0x7f00000003c0)="34daea755d6dbc275b2bb361dcfaa50ad268da3b2f796d3860ff7abad66c3fed", 0x20}, {&(0x7f00000004c0)="fa9eb626d69d2888ce124addeae9996734a5cf", 0x13}], 0x5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 1193.311510][T19895] sp0: Synchronizing with TNC [ 1193.362418][T17885] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1193.563909][T17885] usb 3-1: device descriptor read/64, error 18 [ 1193.610264][T19900] debugfs: Directory 'loop0' with parent 'block' already present! [ 1193.832455][T17885] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1194.042223][T17885] usb 3-1: device descriptor read/64, error 18 [ 1194.162445][T17885] usb usb3-port1: attempt power cycle [ 1194.571974][T17885] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1194.742235][T17885] usb 3-1: device descriptor read/8, error -61 [ 1195.012012][T17885] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1195.182225][T17885] usb 3-1: device descriptor read/8, error -61 [ 1195.304588][T17885] usb usb3-port1: unable to enumerate USB device 10:56:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) writev(r3, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000340)="2d3ae6eb8186bd07f5f002d97b9433274d52ad7c66ba6d54819da3c298fb9a46cace319434dbeb7ed4327831367a7562cccbb88a31e1b4498bbee9689399d7c6aecce2ba80c546ae44b5980f6d7554554422f0ab", 0x54}, {&(0x7f00000003c0)="34daea755d6dbc275b2bb361dcfaa50ad268da3b2f796d3860ff7abad66c3fed", 0x20}, {&(0x7f00000004c0)="fa9eb626d69d2888ce124addeae9996734a5cf", 0x13}], 0x5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 10:56:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) 10:56:16 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 10:56:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) [ 1196.099052][ T24] audit: type=1326 audit(1655463376.145:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19904 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7e549 code=0x0 [ 1196.146985][T19908] sp0: Synchronizing with TNC 10:56:16 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000080)="da", 0x1}], 0x0, 0x0) 10:56:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:16 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x80200, 0x0) 10:56:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 10:56:16 executing program 5: io_uring_setup(0x2760, &(0x7f0000000740)) syz_open_dev$loop(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005f00)) syz_io_uring_setup(0x1343, &(0x7f0000006280), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000006340)) 10:56:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 10:56:16 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000040), 0x4) [ 1196.662444][T17885] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1196.729616][T19923] sp0: Synchronizing with TNC [ 1196.863317][T17885] usb 3-1: device descriptor read/64, error 18 [ 1197.147203][T17885] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1197.342304][T17885] usb 3-1: device descriptor read/64, error 18 [ 1197.462441][T17885] usb usb3-port1: attempt power cycle [ 1197.882074][T17885] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1198.092352][T17885] usb 3-1: device descriptor read/8, error -61 [ 1198.382172][T17885] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1198.572333][T17885] usb 3-1: device descriptor read/8, error -61 [ 1198.692457][T17885] usb usb3-port1: unable to enumerate USB device 10:56:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:19 executing program 5: syz_clone3(&(0x7f0000005dc0)={0x10000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:56:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) dup(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:56:19 executing program 4: syz_clone3(&(0x7f00000002c0)={0x20202000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 10:56:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x204000, 0x0) fcntl$dupfd(r0, 0xc0a, 0xffffffffffffffff) [ 1199.478546][T19935] sp0: Synchronizing with TNC 10:56:19 executing program 0: io_uring_setup(0x2760, &(0x7f0000000740)) epoll_create1(0x80000) syz_io_uring_setup(0x1343, &(0x7f0000006280)={0x0, 0x2bb5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006300), &(0x7f0000006340)) 10:56:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5409, 0x1000000) 10:56:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) dup(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:56:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '-,*/+{*'}]}, 0x20}}, 0x0) 10:56:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getae={0x40, 0x26, 0x826df5c19471e6ad, 0x0, 0x0, {{@in=@dev}, @in6=@private2}}, 0x40}}, 0x0) [ 1199.975211][ T3548] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1200.098347][T19950] nbd: must specify a device to reconfigure [ 1200.163996][T19951] sp0: Synchronizing with TNC [ 1200.172552][ T3548] usb 3-1: device descriptor read/64, error 18 [ 1200.452506][ T3548] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1200.652988][ T3548] usb 3-1: device descriptor read/64, error 18 [ 1200.772455][ T3548] usb usb3-port1: attempt power cycle [ 1201.182147][ T3548] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1201.352389][ T3548] usb 3-1: device descriptor read/8, error -61 [ 1201.622028][ T3548] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1201.792320][ T3548] usb 3-1: device descriptor read/8, error -61 [ 1201.912320][ T3548] usb usb3-port1: unable to enumerate USB device 10:56:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) 10:56:22 executing program 0: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/191) 10:56:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 10:56:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) dup(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 10:56:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64}, {0x6}]}) [ 1202.755310][ T24] audit: type=1326 audit(1655463382.805:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19958 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7faf549 code=0x0 10:56:22 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) 10:56:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) [ 1202.849501][T19963] sp0: Synchronizing with TNC 10:56:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a4100000e0001"], 0x3c}}, 0x0) 10:56:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 10:56:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0x0) [ 1203.212448][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:56:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) [ 1203.404613][T19978] sp0: Synchronizing with TNC [ 1203.502199][T12511] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1203.693308][T12511] usb 3-1: device descriptor read/64, error 18 [ 1203.972202][T12511] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1204.172163][T12511] usb 3-1: device descriptor read/64, error 18 [ 1204.292586][T12511] usb usb3-port1: attempt power cycle [ 1204.712070][T12511] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1204.882339][T12511] usb 3-1: device descriptor read/8, error -61 [ 1205.162088][T12511] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1205.362365][T12511] usb 3-1: device descriptor read/8, error -61 [ 1205.492528][T12511] usb usb3-port1: unable to enumerate USB device 10:56:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getae={0x68, 0x1f, 0x826df5c19471e6ad, 0x0, 0x0, {{@in6=@local}, @in=@empty}, [@address_filter={0x28, 0x1a, {@in=@multicast2, @in=@loopback}}]}, 0x68}}, 0x0) 10:56:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x2) 10:56:26 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x8, 0xffffffffffffffff) write$tcp_congestion(r1, &(0x7f0000000000)='highspeed\x00', 0xa) 10:56:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 10:56:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff080211000001505050505050000080"], 0x50}}, 0x0) [ 1206.320837][T19990] sp0: Synchronizing with TNC 10:56:26 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0), 0x0, 0x0) 10:56:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x2) 10:56:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 10:56:26 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000004cc0)=""/4096, 0x1000, 0x0, &(0x7f0000005d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 10:56:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 10:56:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x2) [ 1206.853889][T12511] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1207.112148][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1207.129552][T20005] sp0: Synchronizing with TNC [ 1207.232320][T12511] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.242984][T12511] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.252768][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1207.262079][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.406490][T12511] usb 3-1: config 0 descriptor?? [ 1207.658340][T19995] UDC core: couldn't find an available UDC or it's busy: -16 [ 1207.666547][T19995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1208.075693][T20010] UDC core: couldn't find an available UDC or it's busy: -16 [ 1208.083532][T20010] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:29 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 10:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 10:56:29 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x8, 0xffffffffffffffff) write$tcp_congestion(r1, 0x0, 0x0) 10:56:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x2) 10:56:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 1209.578336][ T3548] usb 3-1: USB disconnect, device number 127 [ 1209.673160][T20018] sp0: Synchronizing with TNC 10:56:29 executing program 5: syz_clone3(&(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005d80)=[0xffffffffffffffff], 0x1}, 0x58) 10:56:29 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) 10:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 10:56:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x613992f62e61c85b, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 10:56:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 10:56:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0xb, 0x801}, 0x14}}, 0x0) [ 1210.172775][ T3548] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1210.294304][T20033] sp0: Synchronizing with TNC [ 1210.422325][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1210.562505][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.572858][ T3548] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1210.582300][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1210.591550][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.636370][ T3548] usb 3-1: config 0 descriptor?? [ 1210.878536][T20023] UDC core: couldn't find an available UDC or it's busy: -16 [ 1210.886183][T20023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1211.247604][T20036] UDC core: couldn't find an available UDC or it's busy: -16 [ 1211.255350][T20036] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}}], 0x1, 0x0) 10:56:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 10:56:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x25, "20bc7ce32a85aa06f30360c046aa9005f5844fd80c847a8e50d0c6292e536b98", "4dc7bd184e974b54e7e37348ceea2bfe33c78ed77701390bc99f316bc2aa5782", "3abdd0cedbcbe4f02d649e2d44195820f0a8c1e2fe8f0a8b892c578e9e315b26", "c82c26f7824106dcdf4c453ec823f37dd86270f3a84d42be96213b65f2c7d4a6", "276696e35b7edc7d4367507c0c913c63866467a68e2b8d2b771801840587abff", "02d462d5bcb8c354a2e56752"}}) 10:56:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 10:56:32 executing program 0: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x40040) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) [ 1212.906053][ T3548] usb 3-1: USB disconnect, device number 2 [ 1213.052953][T20046] sp0: Synchronizing with TNC 10:56:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002180)=[@hopopts={{0x18, 0x29, 0x3e}}], 0x18}}], 0x1, 0x0) 10:56:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 10:56:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x2, "20bc7ce32a85aa06f30360c046aa9005f5844fd80c847a8e50d0c6292e536b98", "4dc7bd184e974b54e7e37348ceea2bfe33c78ed77701390bc99f316bc2aa5782", "3abdd0cedbcbe4f02d649e2d44195820f0a8c1e2fe8f0a8b892c578e9e315b26", "c82c26f7824106dcdf4c453ec823f37dd86270f3a84d42be96213b65f2c7d4a6", "276696e35b7edc7d4367507c0c913c63866467a68e2b8d2b771801840587abff", "02d462d5bcb8c354a2e56752"}}) 10:56:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x80) 10:56:33 executing program 3: socketpair(0x0, 0x0, 0x401, &(0x7f00000000c0)) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0xa1, 0x8, 0x6}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) 10:56:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000280)=@raw=[@func], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1213.522197][ T3548] usb 3-1: new high-speed USB device number 3 using dummy_hcd 10:56:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1213.782434][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1213.913003][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.923360][ T3548] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1213.932745][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1213.943809][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.036213][ T3548] usb 3-1: config 0 descriptor?? [ 1214.285620][T20049] UDC core: couldn't find an available UDC or it's busy: -16 [ 1214.293763][T20049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1214.671604][T20067] UDC core: couldn't find an available UDC or it's busy: -16 [ 1214.679532][T20067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:36 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x2f0, 0xffffffff, 0x0, 0x2f0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'team_slave_1\x00', 'geneve1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}}, @common=@addrtype={{0x30}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @private, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@set1={{0x28}}, @common=@addrtype={{0x30}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@dev, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 10:56:36 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000780)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(r0, 0x40049409, r1) 10:56:36 executing program 0: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socketpair(0x21, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x20000000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)={0x318, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5ad9707b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x77d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5198}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d5a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "0bec555a0efec9f8373c7efbcf9b0220f4c1d5e2ece2641de10bb42f"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x41, 0x3, "7bdf65d42d9a12a40d152e8977cb0e6412c949f1f62f0953fa7078f33b292164aa35df691442d20381f00ee1b24a672bce91e015b44303855157232c50"}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "dd807d9f0dc788f1a9e2fe7d06bb0a05e301f82c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x27, 0x3, "089620da680bb718141e9868323f00f729a3f7e7144e16c5e118541f4f8504525290a9"}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x0, 0x4850}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000013c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) 10:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) [ 1216.200084][T12511] usb 3-1: USB disconnect, device number 3 10:56:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x0, 0x0, 0x0, 0x0, 0x244}, 0x48) 10:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="57059ab021402ca9cfdc6c532ceb2b36052397e597e8f231c56a0b3921aa3538b7fabf3547c5c3303928e9d05aa146219773a36dd8fdabc1dad1b33cbad66461051272a1d5077c1b1913be32e7342d6cca6ee4b8ba6ed8148d3014b1240c799d5f3f77bbf127646f815f5765db49c92716c238c2a93b6d456c4c6d721e88a33b5fb019b2ddd055f8c8d078b0690f748509d5f85b2a320f369fb6c04e2d4f4cc716da041076a97003a9cc1a7c8b25", 0xae}, {&(0x7f0000000100)="51c4f78af37e369667ce0eb4668ddbe2c872e4ab5a6799157a451d54587e34be5257d37fffc5761180bfed69df528c97a73ab0239ba6031b91674bf8e308d99067e12209266e542c6d8d33f965b1fce979863ab8513a6515baa35f767b38e2984dda38aa7cd33429c37a434667fceab505fc7b77322a15e92ceb04b61a71ba3081f373dd1d7cba59adf2bee1340ec2095f4c3489eef5cecbfdd558741167fe03a655ff207e75f963560a69323060d596c738c5a7b9abd8e139bea974890621fbac086e1f04008be34124d76bb531894ea48511dabdd4c3280eb32391b2071a9fa8cc", 0xe2}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="393dbe04c618172420e2c7cfbd55b0a18d7c6e7a8a63518efa9acadc889b451a8129471a44a756447e9551da893e383ec1fb230d6886ff06edd549407297df5aa15643e804d1f396b09f91ed49a8b59f10afe5a74d7b0cf1ace19e7f655399283c0a501f1ca668e356bb93ea44da654a63e8d3e8d196254a9f3c06fa921883502037883201f4c6f301aceb7f2400a54fa4", 0xfffffffffffffdca}], 0x4}}, {{&(0x7f0000001300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000001340)="4efee9a38886df7336887310bac238a6cd09dfb25a2d83421522a8109c6dd18c1a24ae4767c546b2dac2e7ec29b5bf566477ac2a5aa056751452d7ecd4fd55dfae164fdda2c8aaa23d7518beb9eb483bfdaa4200c929f925ad827c12b663b0c83f2a76c603f64aba6949c4782e1226450b38e76bdb7c0487f8ac32870b83e0e42e3153fa15c17020ae8f8eaa5ca783ba0a64ab5c483f256b60868f972fa02cc3af2a8bb782d82202caa0543991064cac8e71931042de8e69a4fde96557", 0xbd}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="b9032788b63f18d114d9afb3d5e39b81b82a0b5778bd76ac24b91cb022cd763bb235633650b1d2f03ed07b0f2092f272f7d6d5704c364b6a7488e34decaf69860ab23136c3d4add880e9dac527ea94250c3ae5c768caafc89b3ab308915560cb662401a32537defa971d8aa9c6aca1ce651579df4d0c237b59119592480fcf3bcbcfe6bbdc94712533531902630e7db8648e0963525b6187", 0x98}], 0x3, &(0x7f0000002500)=ANY=[@ANYBLOB="280000000000000a290000004c040000730100000000000004010505020081000100000000000000140000000000000029040000430000000600ffffff0c0000"], 0x40}}], 0x3, 0x0) 10:56:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 10:56:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) 10:56:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2000000b}) [ 1216.718233][T20086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:56:36 executing program 3: bpf$PROG_LOAD_XDP(0x18, 0x0, 0x0) [ 1216.792360][ T3548] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1217.042531][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1217.183068][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.193529][ T3548] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.207294][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1217.218701][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.284126][ T3548] usb 3-1: config 0 descriptor?? [ 1217.340596][ T3548] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1217.536339][T20080] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.544066][T20080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.908621][T20093] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.916276][T20093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) 10:56:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 10:56:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) 10:56:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="4484dc215091efd346562af9dbeb6f68d595f27f", 0x14}], 0x1}, 0x0) 10:56:39 executing program 3: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff) [ 1219.422805][ T3548] usb 3-1: USB disconnect, device number 4 10:56:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x50}}, 0x0) 10:56:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f00000002c0)) 10:56:39 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x77359400}, 0x0) 10:56:39 executing program 4: bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r0}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 10:56:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xaa, &(0x7f0000000080)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x3, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1220.032029][T12511] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1220.047801][T20114] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1220.272054][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1220.393308][T12511] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.403895][T12511] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1220.417698][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1220.427092][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.533151][T12511] usb 3-1: config 0 descriptor?? [ 1220.580484][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1220.775878][T20105] UDC core: couldn't find an available UDC or it's busy: -16 [ 1220.784338][T20105] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1221.179013][T20118] UDC core: couldn't find an available UDC or it's busy: -16 [ 1221.186789][T20118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r1, 0xffffffffffffffff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 10:56:42 executing program 5: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x2d, &(0x7f0000000140)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "0e41f2864ee3bfbc12c480df0fae78e0"}, @ptm_cap={0x3}, @ss_cap={0xa}, @ext_cap={0x7}]}}) 10:56:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x50}}, 0x0) 10:56:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:42 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40086602, 0x0) [ 1222.702534][ T3548] usb 3-1: USB disconnect, device number 5 [ 1222.826186][T20127] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:56:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001000000180001801400020076657468315f06005f7465616d000000040002800c000180080001000704"], 0x3c}}, 0x0) 10:56:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x50}}, 0x0) 10:56:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x63}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1223.072021][T17885] usb 6-1: new high-speed USB device number 67 using dummy_hcd 10:56:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)='\x00', 0x1}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3}}], 0x1, 0x0) [ 1223.300235][T20138] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1223.332790][T17885] usb 6-1: Using ep0 maxpacket: 32 10:56:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}}) [ 1223.362010][ T3548] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1223.562690][T17885] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1223.573539][T17885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.584609][T17885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1223.632801][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1223.783141][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.793716][ T3548] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.807079][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1223.816820][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.831563][T17885] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1223.841133][T17885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.849472][T17885] usb 6-1: Product: syz [ 1223.853889][T17885] usb 6-1: Manufacturer: syz [ 1223.858617][T17885] usb 6-1: SerialNumber: syz [ 1223.924694][ T3548] usb 3-1: config 0 descriptor?? [ 1223.980845][ T3548] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1224.176012][T20130] UDC core: couldn't find an available UDC or it's busy: -16 [ 1224.185509][T20130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1224.232661][T17885] usb 6-1: 0:2 : does not exist [ 1224.273189][T17885] usb 6-1: USB disconnect, device number 67 [ 1224.335700][T14015] udevd[14015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1224.554510][T20143] UDC core: couldn't find an available UDC or it's busy: -16 [ 1224.562179][T20143] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x2, 0x2, 0x0, 0x6}, 0x0) 10:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 10:56:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x10) 10:56:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map_val]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xae, &(0x7f0000000140)=""/174, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000180)="d8", 0x1}], 0x3}}], 0x1, 0x0) [ 1225.949501][T12511] usb 3-1: USB disconnect, device number 6 10:56:46 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@generic, @map_val, @jmp, @jmp, @jmp, @initr0, @map_fd]}, &(0x7f0000000080)='GPL\x00', 0xff, 0x92, &(0x7f00000000c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1226.105199][T20153] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:56:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 10:56:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:46 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/v4l2_mem2mem', 0x84080, 0x0) 10:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 10:56:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x8000}, 0x8) [ 1226.553532][T12511] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1226.566367][T20165] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1226.792332][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1226.912653][T12511] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.923174][T12511] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.936546][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1226.947737][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.968618][T12511] usb 3-1: config 0 descriptor?? [ 1227.045429][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1227.218442][T20155] UDC core: couldn't find an available UDC or it's busy: -16 [ 1227.226370][T20155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1227.589680][T20168] UDC core: couldn't find an available UDC or it's busy: -16 [ 1227.597569][T20168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 10:56:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x0, 0x0, 0x10000}, 0x48) 10:56:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 10:56:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r1, 0x707, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0) [ 1229.168717][T12511] usb 3-1: USB disconnect, device number 7 [ 1229.288417][T20174] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:56:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x0, 0x0, 0x0, 0xd, 0x1}, 0x48) 10:56:49 executing program 5: syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x4080) 10:56:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu, @func]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xaa, &(0x7f0000000080)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)=' ', 0x1}], 0x2}}], 0x1, 0x0) 10:56:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff08"], 0x50}}, 0x0) 10:56:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1229.752444][T12511] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1229.992829][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1230.115178][T12511] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.128170][T12511] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1230.141501][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1230.150900][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.224814][T12511] usb 3-1: config 0 descriptor?? [ 1230.302964][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1230.465370][T20180] UDC core: couldn't find an available UDC or it's busy: -16 [ 1230.473063][T20180] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1230.833714][T20193] UDC core: couldn't find an available UDC or it's busy: -16 [ 1230.842948][T20193] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:52 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1b, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8fb2}, 0x80) 10:56:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}, @func, @func, @generic, @generic, @kfunc], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x80) 10:56:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:56:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) 10:56:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 1232.429857][T12511] usb 3-1: USB disconnect, device number 8 10:56:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') mlockall(0x3) 10:56:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) 10:56:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x10) 10:56:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_getres(0x0, 0x0) [ 1233.002270][T17885] usb 3-1: new high-speed USB device number 9 using dummy_hcd 10:56:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1233.242407][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1233.362804][T17885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.373857][T17885] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.387267][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1233.396620][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.440410][T17885] usb 3-1: config 0 descriptor?? [ 1233.494799][T17885] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1233.689767][T20206] UDC core: couldn't find an available UDC or it's busy: -16 [ 1233.697491][T20206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1234.067988][T20219] UDC core: couldn't find an available UDC or it's busy: -16 [ 1234.075911][T20219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:56:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) 10:56:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000080)=@delchain={0x1078, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x1048, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_DST={0x14, 0x2, @empty}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, @TCA_POLICE_RATE={0x404}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x1078}}, 0x0) 10:56:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:56:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) [ 1235.681327][T17885] usb 3-1: USB disconnect, device number 9 [ 1235.807845][T20228] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 10:56:55 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48004) open$dir(0x0, 0x0, 0x0) io_setup(0x100000000000c333, &(0x7f0000000300)) 10:56:55 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/firmware_class', 0x0, 0x0) 10:56:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000"], 0x50}}, 0x0) 10:56:56 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x17}, 0x14) 10:56:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) [ 1236.292398][T17885] usb 3-1: new high-speed USB device number 10 using dummy_hcd 10:56:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) [ 1236.562188][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1236.683288][T17885] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.696662][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1236.706604][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.819264][T17885] usb 3-1: config 0 descriptor?? [ 1236.890167][T17885] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1236.912964][T20230] not chained 600000 origins [ 1236.917708][T20230] CPU: 0 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1236.928007][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.938095][T20230] Call Trace: [ 1236.941387][T20230] [ 1236.944328][T20230] dump_stack_lvl+0x200/0x28c [ 1236.949492][T20230] dump_stack+0x29/0x2c [ 1236.953692][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1236.959658][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1236.965780][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1236.970943][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1236.976828][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1236.982446][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1236.987606][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1236.993468][T20230] ? should_fail+0x79/0x9c0 [ 1236.998008][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1237.003166][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1237.009479][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1237.015596][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1237.020770][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1237.026630][T20230] __msan_chain_origin+0xbd/0x140 [ 1237.031702][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.036886][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.041874][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1237.046602][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.051348][T20230] ? __schedule+0x176c/0x21c0 [ 1237.056077][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1237.061255][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1237.067151][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1237.072418][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1237.078282][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.082851][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1237.087939][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1237.093102][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1237.097910][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.104469][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.109213][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.115604][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.120673][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.125565][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.130104][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.136487][T20230] RIP: 0023:0xf7f05549 [ 1237.140575][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1237.160233][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1237.168768][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1237.176795][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1237.184788][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.192776][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1237.200853][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.208866][T20230] [ 1237.215028][T20230] Uninit was stored to memory at: [ 1237.220138][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.225836][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.230835][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.235716][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.240270][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.245134][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.251547][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.256824][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.261837][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.266409][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.272993][T20230] [ 1237.275339][T20230] Uninit was stored to memory at: [ 1237.280452][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.285832][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.290825][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.295061][T20233] UDC core: couldn't find an available UDC or it's busy: -16 [ 1237.295793][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.303454][T20233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1237.307578][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.320047][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.326632][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.331929][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.336836][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.341482][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.348243][T20230] [ 1237.350615][T20230] Uninit was stored to memory at: [ 1237.355877][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.361040][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.366234][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.370975][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.375737][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.380472][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.387078][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.392307][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.397209][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.401948][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.408337][T20230] [ 1237.410670][T20230] Uninit was stored to memory at: [ 1237.415957][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.421121][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.426403][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.431144][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.435898][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.440631][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.447222][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.452439][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.457341][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.462118][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.468505][T20230] [ 1237.470842][T20230] Uninit was stored to memory at: [ 1237.476142][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.481310][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.486499][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.491266][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.496023][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.500762][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.507376][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.512689][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.517592][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.522344][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.528727][T20230] [ 1237.531067][T20230] Uninit was stored to memory at: [ 1237.536390][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.541560][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.546797][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.551533][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.556306][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.561057][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.567682][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.572883][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.577843][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.582585][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.588975][T20230] [ 1237.591304][T20230] Uninit was stored to memory at: [ 1237.596655][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1237.602107][T20230] get_compat_msghdr+0x10c/0x280 [ 1237.607128][T20230] ___sys_recvmsg+0x289/0xb40 [ 1237.612074][T20230] do_recvmmsg+0x7c9/0x1200 [ 1237.616651][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.621411][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1237.628048][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1237.633251][T20230] do_fast_syscall_32+0x33/0x70 [ 1237.638176][T20230] do_SYSENTER_32+0x1b/0x20 [ 1237.642962][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1237.649365][T20230] [ 1237.651904][T20230] Local variable msg_sys created at: [ 1237.657220][T20230] do_recvmmsg+0xc9/0x1200 [ 1237.661891][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1237.684808][T20248] UDC core: couldn't find an available UDC or it's busy: -16 [ 1237.692663][T20248] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1238.030175][T20230] not chained 610000 origins [ 1238.035296][T20230] CPU: 1 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1238.045672][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1238.055772][T20230] Call Trace: [ 1238.059071][T20230] [ 1238.062014][T20230] dump_stack_lvl+0x200/0x28c [ 1238.066747][T20230] dump_stack+0x29/0x2c [ 1238.070944][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1238.076721][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1238.082845][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.088011][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1238.093881][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1238.099479][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.104643][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1238.110518][T20230] ? should_fail+0x79/0x9c0 [ 1238.115065][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.120232][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1238.126530][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1238.132743][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.137909][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1238.143792][T20230] __msan_chain_origin+0xbd/0x140 [ 1238.148870][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.154318][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.159487][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1238.164224][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.168967][T20230] ? __schedule+0x176c/0x21c0 [ 1238.173704][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.178875][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1238.184748][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.189927][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1238.195798][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.200366][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1238.205487][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1238.210670][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1238.215499][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.222071][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.226842][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.233240][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.238320][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.243222][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.247783][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.254164][T20230] RIP: 0023:0xf7f05549 [ 1238.258516][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1238.278179][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1238.286641][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1238.294748][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1238.302751][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.310753][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1238.318753][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.326779][T20230] [ 1238.332607][T20230] Uninit was stored to memory at: [ 1238.337729][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.343545][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.348536][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.353364][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.357923][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.362763][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.369166][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.374439][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.379370][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.384022][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.390404][T20230] [ 1238.392836][T20230] Uninit was stored to memory at: [ 1238.397933][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.403194][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.408271][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.415623][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.420193][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.425087][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.431487][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.436730][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.441644][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.446371][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.452991][T20230] [ 1238.455319][T20230] Uninit was stored to memory at: [ 1238.460411][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.465732][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.470721][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.475608][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.480178][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.485058][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.491452][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.496689][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.501597][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.506320][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.512820][T20230] [ 1238.515165][T20230] Uninit was stored to memory at: [ 1238.520262][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.526507][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.531512][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.536411][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.540967][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.545949][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.552525][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.557628][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.562675][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.567218][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.573705][T20230] [ 1238.576056][T20230] Uninit was stored to memory at: [ 1238.581146][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.586468][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.591460][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.596357][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.600913][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.605798][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.612296][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.617384][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.622456][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.627011][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.633547][T20230] [ 1238.635878][T20230] Uninit was stored to memory at: [ 1238.640981][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.646315][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.651928][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.657499][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.662756][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.667672][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.674233][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.679342][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.684438][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.688993][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.695569][T20230] [ 1238.697917][T20230] Uninit was stored to memory at: [ 1238.703230][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1238.708399][T20230] get_compat_msghdr+0x10c/0x280 [ 1238.713556][T20230] ___sys_recvmsg+0x289/0xb40 [ 1238.718314][T20230] do_recvmmsg+0x7c9/0x1200 [ 1238.723130][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1238.727877][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1238.734457][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1238.739551][T20230] do_fast_syscall_32+0x33/0x70 [ 1238.744632][T20230] do_SYSENTER_32+0x1b/0x20 [ 1238.749191][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1238.755793][T20230] [ 1238.758133][T20230] Local variable msg_sys created at: [ 1238.763589][T20230] do_recvmmsg+0xc9/0x1200 [ 1238.768158][T20230] __sys_recvmmsg+0x520/0x6f0 10:56:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="95c826bd7000ffdbdf25110000002400018008000100", @ANYRES32=0x0, @ANYBLOB="000003b9", @ANYRES32=0x0, @ANYBLOB="08000100bf5a074364f123325cfd1ecd7c33b5f2e46b425a0ed317db1fbdda114f3e665ed4d47513b19fb2ea6306b07c7b3d763e9fe4cff940d665", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2000018008000300020000001400020076657468305f746f5f7465616d000000"], 0x58}}, 0x0) 10:56:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:56:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x4e6ba) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_ifreq(r2, 0x8946, &(0x7f0000000080)={'veth1_to_hsr\x00', @ifru_data=&(0x7f0000000000)="2a0000008a46663181481c51ab63f884b84ab569ac5c3ce73983fba0f0c8f7a2"}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0xffffffff000) 10:56:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:56:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) [ 1238.973215][T17885] usb 3-1: USB disconnect, device number 10 [ 1239.134300][T20251] fs-verity: sha512 using implementation "sha512-generic" [ 1239.167765][T20254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1239.568133][T17885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1239.688216][T20230] not chained 620000 origins [ 1239.695057][T20230] CPU: 0 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1239.705290][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.715388][T20230] Call Trace: [ 1239.718695][T20230] [ 1239.721652][T20230] dump_stack_lvl+0x200/0x28c [ 1239.726385][T20230] dump_stack+0x29/0x2c [ 1239.730582][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1239.736361][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1239.742590][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.747761][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1239.753648][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1239.759252][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.764422][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1239.770293][T20230] ? should_fail+0x79/0x9c0 [ 1239.774967][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.780172][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1239.786474][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1239.792802][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.797970][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1239.803837][T20230] __msan_chain_origin+0xbd/0x140 [ 1239.808919][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1239.814155][T20230] get_compat_msghdr+0x10c/0x280 [ 1239.819162][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1239.823902][T20230] ___sys_recvmsg+0x289/0xb40 [ 1239.828652][T20230] ? __schedule+0x176c/0x21c0 [ 1239.833408][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.838580][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1239.844448][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.849617][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1239.855492][T20230] do_recvmmsg+0x7c9/0x1200 [ 1239.860095][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1239.865290][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1239.870494][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1239.875338][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1239.881914][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1239.886672][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1239.889863][T20251] fs-verity (sda1, inode 1175): Error -4 building Merkle tree [ 1239.893260][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1239.893326][T20230] do_fast_syscall_32+0x33/0x70 [ 1239.893382][T20230] do_SYSENTER_32+0x1b/0x20 [ 1239.917306][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1239.923695][T20230] RIP: 0023:0xf7f05549 [ 1239.927798][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1239.947455][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1239.955934][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1239.964159][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1239.972161][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.980163][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1239.988168][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.996280][T20230] [ 1239.999460][T20230] Uninit was stored to memory at: [ 1240.004759][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.009970][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.015082][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.019823][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.024528][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.029268][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.035890][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.041071][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.046125][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.050679][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.057299][T20230] [ 1240.059639][T20230] Uninit was stored to memory at: [ 1240.064883][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.070044][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.075169][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.079899][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.084585][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.089351][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.095892][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.100976][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.106028][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.110578][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.117144][T20230] [ 1240.119482][T20230] Uninit was stored to memory at: [ 1240.124813][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.129998][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.135199][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.139942][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.144695][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.149470][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.156188][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.161266][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.166311][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.170865][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.177448][T20230] [ 1240.179786][T20230] Uninit was stored to memory at: [ 1240.185086][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.190333][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.195547][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.200303][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.205144][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.209891][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.216476][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.221577][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.226762][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.231316][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.237907][T20230] [ 1240.240250][T20230] Uninit was stored to memory at: [ 1240.245520][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.250711][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.255924][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.260660][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.265445][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.270180][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.276763][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.281958][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.286858][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.291501][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.298135][T20230] [ 1240.300478][T20230] Uninit was stored to memory at: [ 1240.305851][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.311049][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.316261][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.321125][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.325890][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.330649][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.337707][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.342932][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.347837][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.352614][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.359021][T20230] [ 1240.361387][T20230] Uninit was stored to memory at: [ 1240.366725][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.372060][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.377077][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.382011][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.386614][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.391387][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.397997][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.403198][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.408158][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.412913][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.419301][T20230] [ 1240.421681][T20230] Local variable msg_sys created at: [ 1240.427159][T20230] do_recvmmsg+0xc9/0x1200 [ 1240.431632][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.571973][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1240.692575][T17885] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.706025][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1240.706192][T20230] not chained 630000 origins [ 1240.706215][T20230] CPU: 1 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1240.715508][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.719823][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.719852][T20230] Call Trace: [ 1240.719869][T20230] [ 1240.719885][T20230] dump_stack_lvl+0x200/0x28c [ 1240.759145][T20230] dump_stack+0x29/0x2c [ 1240.763368][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1240.769177][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1240.775320][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.780483][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1240.786346][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1240.791937][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.797168][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1240.803054][T20230] ? should_fail+0x79/0x9c0 [ 1240.807596][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.812850][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1240.819184][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1240.825356][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.830547][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1240.836555][T20230] __msan_chain_origin+0xbd/0x140 [ 1240.841632][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1240.846813][T20230] get_compat_msghdr+0x10c/0x280 [ 1240.851801][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1240.856531][T20230] ___sys_recvmsg+0x289/0xb40 [ 1240.861265][T20230] ? __schedule+0x176c/0x21c0 [ 1240.865991][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.871157][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1240.877023][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.882209][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1240.888104][T20230] do_recvmmsg+0x7c9/0x1200 [ 1240.892665][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1240.897757][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1240.902923][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1240.907732][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.914298][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1240.919056][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1240.925460][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1240.930580][T20230] do_fast_syscall_32+0x33/0x70 [ 1240.935486][T20230] do_SYSENTER_32+0x1b/0x20 [ 1240.940068][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1240.946462][T20230] RIP: 0023:0xf7f05549 [ 1240.950552][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1240.970292][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1240.978756][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1240.987015][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1240.995034][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.003137][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1241.011236][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.019542][T20230] [ 1241.025588][T20230] Uninit was stored to memory at: [ 1241.030721][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.036254][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.041358][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.046277][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.048195][T17885] usb 3-1: config 0 descriptor?? [ 1241.050833][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.060611][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.067117][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.072295][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.077224][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.081882][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.088296][T20230] [ 1241.090635][T20230] Uninit was stored to memory at: [ 1241.095840][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.101113][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.106221][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.110984][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.115701][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.120481][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.127063][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.132315][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.137215][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.141863][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.148477][T20230] [ 1241.150823][T20230] Uninit was stored to memory at: [ 1241.156108][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.161300][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.166460][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.171189][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.175898][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.180631][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.187164][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.192388][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.197287][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.201931][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.203183][T17885] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1241.208482][T20230] [ 1241.208492][T20230] Uninit was stored to memory at: [ 1241.208566][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.228522][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.233690][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.238464][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.243202][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.247930][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.254453][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.259539][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.264606][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.269155][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.275771][T20230] [ 1241.278116][T20230] Uninit was stored to memory at: [ 1241.283440][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.288649][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.293750][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.298485][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.303191][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.307928][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.314493][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.319572][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.324642][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.329199][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.335754][T20230] [ 1241.338092][T20230] Uninit was stored to memory at: [ 1241.343380][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.348598][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.353779][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.358700][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.363453][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.368188][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.374753][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.379840][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.384996][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.389582][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.396126][T20230] [ 1241.398466][T20230] Uninit was stored to memory at: [ 1241.400907][T20260] UDC core: couldn't find an available UDC or it's busy: -16 [ 1241.403669][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.403729][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.403783][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.411483][T20260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1241.417443][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.439047][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.443966][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.450366][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.455639][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.460545][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.465372][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.471936][T20230] [ 1241.474273][T20230] Local variable msg_sys created at: [ 1241.479930][T20230] do_recvmmsg+0xc9/0x1200 [ 1241.484553][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.680796][T20230] not chained 640000 origins [ 1241.685758][T20230] CPU: 0 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1241.696130][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.706207][T20230] Call Trace: [ 1241.709592][T20230] [ 1241.712531][T20230] dump_stack_lvl+0x200/0x28c [ 1241.717350][T20230] dump_stack+0x29/0x2c [ 1241.721647][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1241.727485][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1241.733666][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.738833][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1241.744713][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1241.750325][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.755498][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1241.761586][T20230] ? should_fail+0x79/0x9c0 [ 1241.766301][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.771653][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1241.778164][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1241.784382][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.789562][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1241.795444][T20230] __msan_chain_origin+0xbd/0x140 [ 1241.800549][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.805825][T20230] get_compat_msghdr+0x10c/0x280 [ 1241.810805][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1241.815549][T20230] ___sys_recvmsg+0x289/0xb40 [ 1241.820375][T20230] ? __schedule+0x176c/0x21c0 [ 1241.825276][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.830434][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1241.836288][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.841451][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1241.847303][T20230] do_recvmmsg+0x7c9/0x1200 [ 1241.851943][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1241.857051][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1241.862312][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1241.867112][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.873682][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1241.878464][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1241.884863][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1241.889929][T20230] do_fast_syscall_32+0x33/0x70 [ 1241.894838][T20230] do_SYSENTER_32+0x1b/0x20 [ 1241.899432][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1241.905836][T20230] RIP: 0023:0xf7f05549 [ 1241.909935][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1241.929891][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1241.938351][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1241.946448][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1241.954481][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.962504][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1241.970666][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.978821][T20230] [ 1241.985963][T20230] Uninit was stored to memory at: [ 1241.991105][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1241.999242][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.004754][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.009587][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.014299][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.019032][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.025737][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.030840][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.035875][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.040449][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.047116][T20230] [ 1242.049466][T20230] Uninit was stored to memory at: [ 1242.053204][T20261] UDC core: couldn't find an available UDC or it's busy: -16 [ 1242.054768][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.062497][T20261] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1242.067410][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.080432][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.085356][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.090025][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.095029][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.101460][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.106818][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.112073][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.116640][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.123342][T20230] [ 1242.125691][T20230] Uninit was stored to memory at: [ 1242.130786][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.136140][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.141149][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.146168][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.150813][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.155759][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.162286][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.167392][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.172478][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.177045][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.183620][T20230] [ 1242.185958][T20230] Uninit was stored to memory at: [ 1242.191050][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.196376][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.201369][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.206327][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.210886][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.215877][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.222390][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.227460][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.232964][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.237516][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.244087][T20230] [ 1242.246422][T20230] Uninit was stored to memory at: [ 1242.251501][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.256836][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.261936][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.266688][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.271254][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.276119][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.282624][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.287695][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.292764][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.297670][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.304261][T20230] [ 1242.306628][T20230] Uninit was stored to memory at: [ 1242.312012][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.317178][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.322318][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.327053][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.331880][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.336613][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.343250][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.348326][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.353372][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.357921][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.364523][T20230] [ 1242.366854][T20230] Uninit was stored to memory at: [ 1242.372075][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.377237][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.382363][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.387104][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.391664][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.396637][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.403201][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.408308][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.413420][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.417974][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.424689][T20230] [ 1242.427114][T20230] Local variable msg_sys created at: [ 1242.432570][T20230] do_recvmmsg+0xc9/0x1200 [ 1242.438845][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.653760][T20230] not chained 650000 origins [ 1242.658399][T20230] CPU: 0 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1242.668596][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.678683][T20230] Call Trace: [ 1242.681971][T20230] [ 1242.684929][T20230] dump_stack_lvl+0x200/0x28c [ 1242.689665][T20230] dump_stack+0x29/0x2c [ 1242.693870][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1242.699638][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1242.705738][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.710886][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1242.716735][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1242.722354][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.727518][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1242.733506][T20230] ? should_fail+0x79/0x9c0 [ 1242.738034][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.743180][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1242.749458][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1242.755568][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.760749][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1242.766606][T20230] __msan_chain_origin+0xbd/0x140 [ 1242.771691][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.776875][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.781855][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1242.786583][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.791305][T20230] ? __schedule+0x176c/0x21c0 [ 1242.796015][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.801157][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1242.807006][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.812156][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1242.818028][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.822594][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1242.827689][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1242.832933][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1242.837731][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.844279][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.849004][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.855376][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.860540][T20230] do_fast_syscall_32+0x33/0x70 [ 1242.865424][T20230] do_SYSENTER_32+0x1b/0x20 [ 1242.869986][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1242.876365][T20230] RIP: 0023:0xf7f05549 [ 1242.880458][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1242.900111][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1242.908552][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1242.916543][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1242.924552][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.932577][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1242.940584][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.948588][T20230] [ 1242.954125][T20230] Uninit was stored to memory at: [ 1242.959256][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1242.964818][T20230] get_compat_msghdr+0x10c/0x280 [ 1242.969812][T20230] ___sys_recvmsg+0x289/0xb40 [ 1242.974695][T20230] do_recvmmsg+0x7c9/0x1200 [ 1242.979259][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1242.984180][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1242.990565][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1242.995769][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.000661][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.005379][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.011907][T20230] [ 1243.014243][T20230] Uninit was stored to memory at: [ 1243.019329][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.024704][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.029702][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.034611][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.039169][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.044157][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.050641][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.055887][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.060810][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.065590][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.072114][T20230] [ 1243.074452][T20230] Uninit was stored to memory at: [ 1243.079547][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.084854][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.089848][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.094788][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.099348][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.104271][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.110660][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.115865][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.120790][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.125559][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.132078][T20230] [ 1243.134498][T20230] Uninit was stored to memory at: [ 1243.139589][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.143353][T12511] usb 3-1: USB disconnect, device number 11 [ 1243.144945][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.155878][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.160635][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.165422][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.170187][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.176800][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.182005][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.186913][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.191460][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.198071][T20230] [ 1243.200412][T20230] Uninit was stored to memory at: [ 1243.205710][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.210899][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.216082][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.220809][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.225490][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.230228][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.236823][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.242031][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.246934][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.251488][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.258030][T20230] [ 1243.260361][T20230] Uninit was stored to memory at: [ 1243.265571][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.270735][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.275864][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.280587][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.285281][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.290040][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.296589][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.301951][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.306856][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.311479][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.318012][T20230] [ 1243.320354][T20230] Uninit was stored to memory at: [ 1243.325562][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.330720][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.335858][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.340587][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.345257][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.349982][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.356520][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.361597][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.366691][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.371240][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.377922][T20230] [ 1243.380262][T20230] Local variable msg_sys created at: [ 1243.385724][T20230] do_recvmmsg+0xc9/0x1200 [ 1243.390194][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.580278][T20230] not chained 660000 origins [ 1243.584991][T20230] CPU: 0 PID: 20230 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1243.595171][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.605256][T20230] Call Trace: [ 1243.608537][T20230] [ 1243.611465][T20230] dump_stack_lvl+0x200/0x28c [ 1243.616178][T20230] dump_stack+0x29/0x2c [ 1243.620356][T20230] kmsan_internal_chain_origin+0x78/0x120 [ 1243.626103][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1243.632289][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.637449][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1243.643344][T20230] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1243.648949][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.654119][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1243.659988][T20230] ? should_fail+0x79/0x9c0 [ 1243.664536][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.669795][T20230] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1243.676095][T20230] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1243.682197][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.687337][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1243.693201][T20230] __msan_chain_origin+0xbd/0x140 [ 1243.698291][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.703498][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.708515][T20230] ? do_recvmmsg+0x7c9/0x1200 [ 1243.713259][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.717976][T20230] ? __schedule+0x176c/0x21c0 [ 1243.722686][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.727836][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1243.733673][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.738817][T20230] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1243.744686][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.749876][T20230] ? filter_irq_stacks+0xb9/0x230 [ 1243.754962][T20230] ? kmsan_get_metadata+0x33/0x220 [ 1243.760133][T20230] ? __sys_recvmmsg+0xb9/0x6f0 [ 1243.764934][T20230] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.771477][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.776207][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.782573][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.787627][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.792509][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.797145][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.803638][T20230] RIP: 0023:0xf7f05549 [ 1243.807722][T20230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1243.827487][T20230] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1243.835927][T20230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1243.843930][T20230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1243.851940][T20230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.859954][T20230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1243.867960][T20230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.875967][T20230] [ 1243.881417][T20230] Uninit was stored to memory at: [ 1243.886923][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.892234][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.897227][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.902150][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.906879][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.911600][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.918120][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.923302][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.928198][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.932935][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.939316][T20230] [ 1243.941652][T20230] Uninit was stored to memory at: [ 1243.946920][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1243.952212][T20230] get_compat_msghdr+0x10c/0x280 [ 1243.957198][T20230] ___sys_recvmsg+0x289/0xb40 [ 1243.962064][T20230] do_recvmmsg+0x7c9/0x1200 [ 1243.966615][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1243.971333][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1243.977924][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1243.983098][T20230] do_fast_syscall_32+0x33/0x70 [ 1243.987988][T20230] do_SYSENTER_32+0x1b/0x20 [ 1243.992698][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1243.999087][T20230] [ 1244.001400][T20230] Uninit was stored to memory at: [ 1244.006617][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1244.011898][T20230] get_compat_msghdr+0x10c/0x280 [ 1244.016883][T20230] ___sys_recvmsg+0x289/0xb40 [ 1244.021607][T20230] do_recvmmsg+0x7c9/0x1200 [ 1244.026286][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1244.031009][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1244.037522][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1244.042711][T20230] do_fast_syscall_32+0x33/0x70 [ 1244.047669][T20230] do_SYSENTER_32+0x1b/0x20 [ 1244.052418][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.058793][T20230] [ 1244.061112][T20230] Uninit was stored to memory at: [ 1244.066337][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1244.071496][T20230] get_compat_msghdr+0x10c/0x280 [ 1244.076670][T20230] ___sys_recvmsg+0x289/0xb40 [ 1244.081424][T20230] do_recvmmsg+0x7c9/0x1200 [ 1244.086172][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1244.090899][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1244.097434][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1244.102631][T20230] do_fast_syscall_32+0x33/0x70 [ 1244.107525][T20230] do_SYSENTER_32+0x1b/0x20 [ 1244.112241][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.118617][T20230] [ 1244.120930][T20230] Uninit was stored to memory at: [ 1244.126146][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1244.131300][T20230] get_compat_msghdr+0x10c/0x280 [ 1244.136410][T20230] ___sys_recvmsg+0x289/0xb40 [ 1244.141152][T20230] do_recvmmsg+0x7c9/0x1200 [ 1244.145961][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1244.150706][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1244.157276][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1244.162498][T20230] do_fast_syscall_32+0x33/0x70 [ 1244.167412][T20230] do_SYSENTER_32+0x1b/0x20 [ 1244.172135][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.178512][T20230] [ 1244.180838][T20230] Uninit was stored to memory at: [ 1244.186073][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1244.191231][T20230] get_compat_msghdr+0x10c/0x280 [ 1244.196408][T20230] ___sys_recvmsg+0x289/0xb40 [ 1244.201259][T20230] do_recvmmsg+0x7c9/0x1200 [ 1244.206005][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1244.210745][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1244.217304][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1244.222501][T20230] do_fast_syscall_32+0x33/0x70 [ 1244.227393][T20230] do_SYSENTER_32+0x1b/0x20 [ 1244.232113][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.238493][T20230] [ 1244.240845][T20230] Uninit was stored to memory at: [ 1244.246086][T20230] __get_compat_msghdr+0x6ea/0x9e0 [ 1244.251246][T20230] get_compat_msghdr+0x10c/0x280 [ 1244.256397][T20230] ___sys_recvmsg+0x289/0xb40 [ 1244.261124][T20230] do_recvmmsg+0x7c9/0x1200 [ 1244.265868][T20230] __sys_recvmmsg+0x520/0x6f0 [ 1244.270597][T20230] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1244.277113][T20230] __do_fast_syscall_32+0x95/0xf0 [ 1244.284900][T20230] do_fast_syscall_32+0x33/0x70 [ 1244.289780][T20230] do_SYSENTER_32+0x1b/0x20 [ 1244.294491][T20230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1244.300884][T20230] [ 1244.303399][T20230] Local variable msg_sys created at: [ 1244.308704][T20230] do_recvmmsg+0xc9/0x1200 [ 1244.313346][T20230] __sys_recvmmsg+0x520/0x6f0 10:57:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) 10:57:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2'], 0x50}}, 0x0) 10:57:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="95c826bd7000ffdbdf25110000002400018008000100", @ANYRES32=0x0, @ANYBLOB="000003b9", @ANYRES32=0x0, @ANYBLOB="08000100bf5a074364f123325cfd1ecd7c33b5f2e46b425a0ed317db1fbdda114f3e665ed4d47513b19fb2ea6306b07c7b3d763e9fe4cff940d665", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2000018008000300020000001400020076657468305f746f5f7465616d000000"], 0x58}}, 0x0) 10:57:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x7, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:57:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1244.537355][T20269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 10:57:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:04 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/block/ram11', 0x0, 0x0) 10:57:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:04 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) [ 1244.792700][T12511] usb 3-1: new high-speed USB device number 12 using dummy_hcd 10:57:05 executing program 4: memfd_create(&(0x7f0000000f80)='\x00', 0x6) [ 1245.036014][T12511] usb 3-1: Using ep0 maxpacket: 16 10:57:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x00'], 0x50}}, 0x0) [ 1245.152312][T12511] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1245.165757][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1245.177102][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.308047][T12511] usb 3-1: config 0 descriptor?? [ 1245.367672][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1245.556864][T20271] UDC core: couldn't find an available UDC or it's busy: -16 [ 1245.565241][T20271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.005158][T20294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.013553][T20294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1246.139970][T20284] not chained 670000 origins [ 1246.145075][T20284] CPU: 1 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1246.155286][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.165375][T20284] Call Trace: [ 1246.168692][T20284] [ 1246.171643][T20284] dump_stack_lvl+0x200/0x28c [ 1246.176384][T20284] dump_stack+0x29/0x2c [ 1246.180586][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1246.186374][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1246.192501][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.197670][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.203542][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1246.209210][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.214403][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.220285][T20284] ? should_fail+0x79/0x9c0 [ 1246.224834][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.230010][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1246.236315][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1246.242447][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.247618][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.253499][T20284] __msan_chain_origin+0xbd/0x140 [ 1246.258582][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.263768][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.268767][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1246.273503][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.278245][T20284] ? __schedule+0x176c/0x21c0 [ 1246.282984][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.288175][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.294051][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.299220][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.305091][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.309654][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1246.314759][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1246.319932][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1246.324749][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.331317][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.336069][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.342476][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.347554][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.352453][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.357000][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.363382][T20284] RIP: 0023:0xf7f7e549 [ 1246.367477][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1246.387134][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1246.395601][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1246.403612][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1246.411614][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1246.419619][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1246.427626][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.435644][T20284] [ 1246.441683][T20284] Uninit was stored to memory at: [ 1246.452989][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.458151][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.463242][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.467971][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.472618][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.477355][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.483848][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.488929][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.493917][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.498570][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.505110][T20284] [ 1246.507451][T20284] Uninit was stored to memory at: [ 1246.512710][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.517880][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.523019][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.527750][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.532513][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.537258][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.543814][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.548888][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.553969][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.558520][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.565276][T20284] [ 1246.567623][T20284] Uninit was stored to memory at: [ 1246.572877][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.578040][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.583186][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.587918][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.592649][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.597386][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.604032][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.609204][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.614278][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.618852][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.625431][T20284] [ 1246.627777][T20284] Uninit was stored to memory at: [ 1246.633035][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.638204][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.643375][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.648113][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.652884][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.657654][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.664211][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.669296][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.674426][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.678982][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.685633][T20284] [ 1246.687970][T20284] Uninit was stored to memory at: [ 1246.693261][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.698440][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.703636][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.708390][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.713213][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.717994][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.724614][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.729707][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.734813][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.739383][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.746006][T20284] [ 1246.748361][T20284] Uninit was stored to memory at: [ 1246.753675][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.759061][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.764240][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.769108][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.773846][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.778621][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.785217][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.790318][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.795450][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.800012][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.806597][T20284] [ 1246.808944][T20284] Uninit was stored to memory at: [ 1246.814231][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1246.819406][T20284] get_compat_msghdr+0x10c/0x280 [ 1246.824725][T20284] ___sys_recvmsg+0x289/0xb40 [ 1246.829500][T20284] do_recvmmsg+0x7c9/0x1200 [ 1246.834248][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.838993][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1246.845565][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1246.850647][T20284] do_fast_syscall_32+0x33/0x70 [ 1246.855724][T20284] do_SYSENTER_32+0x1b/0x20 [ 1246.860283][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1246.866946][T20284] [ 1246.869301][T20284] Local variable msg_sys created at: [ 1246.874771][T20284] do_recvmmsg+0xc9/0x1200 [ 1246.879247][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1246.928947][T20274] not chained 680000 origins [ 1246.933720][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1246.944051][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.954151][T20274] Call Trace: [ 1246.957460][T20274] [ 1246.960413][T20274] dump_stack_lvl+0x200/0x28c [ 1246.965166][T20274] dump_stack+0x29/0x2c [ 1246.969374][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1246.975160][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1246.981304][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1246.986570][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1246.992455][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1246.998063][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.003241][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.009216][T20274] ? should_fail+0x79/0x9c0 [ 1247.013773][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.018963][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1247.025267][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1247.031408][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.036582][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.042456][T20274] __msan_chain_origin+0xbd/0x140 [ 1247.047552][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.052765][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.057785][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1247.062554][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.067316][T20274] ? __schedule+0x176c/0x21c0 [ 1247.072066][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.077339][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.083215][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.088390][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.094272][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.098852][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1247.103954][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1247.109313][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1247.114933][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1247.119765][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.126346][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.131106][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.137533][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.142713][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.147623][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.152208][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.158614][T20274] RIP: 0023:0xf7f05549 [ 1247.162738][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1247.182399][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1247.190865][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1247.198878][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1247.206887][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1247.214888][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1247.222891][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1247.230921][T20274] [ 1247.236988][T20274] Uninit was stored to memory at: [ 1247.242494][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.247669][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.252756][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.257486][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.262135][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.266866][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.273353][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.278447][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.283465][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.288016][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.294493][T20274] [ 1247.296826][T20274] Uninit was stored to memory at: [ 1247.302011][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.307181][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.312275][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.317015][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.321857][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.326588][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.333092][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.338170][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.343177][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.347730][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.354217][T20274] [ 1247.356555][T20274] Uninit was stored to memory at: [ 1247.361649][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.366990][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.372193][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.376938][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.381504][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.386405][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.392886][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.397968][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.403019][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.407567][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.414104][T20274] [ 1247.416441][T20274] Uninit was stored to memory at: [ 1247.421532][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.426870][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.431973][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.436712][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.441272][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.446192][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.452687][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.457768][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.462841][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.467482][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.474113][T20274] [ 1247.476449][T20274] Uninit was stored to memory at: [ 1247.481544][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.486867][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.491952][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.496681][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.501236][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.506131][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.512674][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.515762][ T3548] usb 3-1: USB disconnect, device number 12 [ 1247.517792][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.517849][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.533749][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.540147][T20274] [ 1247.542650][T20274] Uninit was stored to memory at: [ 1247.547764][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.553083][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.558213][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.563120][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.567690][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.572617][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.579032][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.584411][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.589411][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.594229][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.600736][T20274] [ 1247.603353][T20274] Uninit was stored to memory at: [ 1247.608466][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.613815][T20274] get_compat_msghdr+0x10c/0x280 [ 1247.618834][T20274] ___sys_recvmsg+0x289/0xb40 [ 1247.623816][T20274] do_recvmmsg+0x7c9/0x1200 [ 1247.628374][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.633286][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.639726][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1247.644967][T20274] do_fast_syscall_32+0x33/0x70 [ 1247.649953][T20274] do_SYSENTER_32+0x1b/0x20 [ 1247.654701][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.661098][T20274] [ 1247.663619][T20274] Local variable msg_sys created at: [ 1247.668920][T20274] do_recvmmsg+0xc9/0x1200 [ 1247.673561][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1247.748744][T20284] not chained 690000 origins [ 1247.753510][T20284] CPU: 1 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1247.763708][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.773793][T20284] Call Trace: [ 1247.777085][T20284] [ 1247.780026][T20284] dump_stack_lvl+0x200/0x28c [ 1247.784754][T20284] dump_stack+0x29/0x2c [ 1247.788946][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1247.794731][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1247.801106][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.806271][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.812132][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1247.817728][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.824317][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.830586][T20284] ? should_fail+0x79/0x9c0 [ 1247.835244][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.840420][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1247.846721][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1247.852844][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.858008][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.863869][T20284] __msan_chain_origin+0xbd/0x140 [ 1247.868956][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1247.874134][T20284] get_compat_msghdr+0x10c/0x280 [ 1247.879123][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1247.883861][T20284] ___sys_recvmsg+0x289/0xb40 [ 1247.888593][T20284] ? __schedule+0x176c/0x21c0 [ 1247.893316][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.898479][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.904339][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.909510][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1247.915385][T20284] do_recvmmsg+0x7c9/0x1200 [ 1247.919936][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1247.925022][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1247.930186][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1247.934991][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.941568][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1247.946395][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1247.952788][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1247.957859][T20284] do_fast_syscall_32+0x33/0x70 [ 1247.962750][T20284] do_SYSENTER_32+0x1b/0x20 [ 1247.967295][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1247.973670][T20284] RIP: 0023:0xf7f7e549 [ 1247.977842][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1247.997491][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1248.006022][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1248.014197][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1248.022189][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1248.030610][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1248.039051][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.047236][T20284] [ 1248.055083][T20284] Uninit was stored to memory at: [ 1248.060931][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.066219][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.071250][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.076105][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.080691][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.085632][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.092239][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.097493][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.103484][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.108589][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.116041][T20284] [ 1248.118385][T20284] Uninit was stored to memory at: [ 1248.123700][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.128865][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.134029][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.138782][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.143492][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.148234][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.154930][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.160008][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.165176][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.169727][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.176381][T20284] [ 1248.178719][T20284] Uninit was stored to memory at: [ 1248.184074][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.189247][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.194401][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.199140][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.203864][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.208622][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.215235][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.220323][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.225417][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.229974][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.236513][T20284] [ 1248.238863][T20284] Uninit was stored to memory at: [ 1248.244118][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.249320][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.254471][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.259202][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.263908][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.268646][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.275216][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.280292][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.285354][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.289994][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.296648][T20284] [ 1248.298990][T20284] Uninit was stored to memory at: [ 1248.304242][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.309405][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.314566][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.319309][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.324023][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.328755][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.335308][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.340384][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.345533][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.350079][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.356621][T20284] [ 1248.358957][T20284] Uninit was stored to memory at: [ 1248.364223][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.369383][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.374534][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.379277][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.383985][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.388709][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.395195][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.400268][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.405324][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.409874][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.416413][T20284] [ 1248.418746][T20284] Uninit was stored to memory at: [ 1248.423932][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.429091][T20284] get_compat_msghdr+0x10c/0x280 [ 1248.434247][T20284] ___sys_recvmsg+0x289/0xb40 [ 1248.439237][T20284] do_recvmmsg+0x7c9/0x1200 [ 1248.443943][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.448678][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.455230][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1248.460313][T20284] do_fast_syscall_32+0x33/0x70 [ 1248.465379][T20284] do_SYSENTER_32+0x1b/0x20 [ 1248.469924][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.476476][T20284] [ 1248.478836][T20284] Local variable msg_sys created at: [ 1248.484287][T20284] do_recvmmsg+0xc9/0x1200 [ 1248.488752][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1248.526253][T20274] not chained 700000 origins [ 1248.530897][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1248.541094][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.551190][T20274] Call Trace: [ 1248.554495][T20274] [ 1248.557450][T20274] dump_stack_lvl+0x200/0x28c [ 1248.562188][T20274] dump_stack+0x29/0x2c [ 1248.566384][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1248.572166][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1248.578294][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.583457][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.589321][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1248.594917][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.600092][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.605959][T20274] ? should_fail+0x79/0x9c0 [ 1248.610497][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.615659][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1248.621958][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1248.628088][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.633254][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.639133][T20274] __msan_chain_origin+0xbd/0x140 [ 1248.644218][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.649837][T20274] get_compat_msghdr+0x10c/0x280 [ 1248.654831][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1248.659578][T20274] ___sys_recvmsg+0x289/0xb40 [ 1248.664321][T20274] ? __schedule+0x176c/0x21c0 [ 1248.669069][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.674368][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.680234][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.685399][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.691269][T20274] do_recvmmsg+0x7c9/0x1200 [ 1248.695867][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1248.701074][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1248.706250][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1248.711863][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1248.716694][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.723349][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1248.728109][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.734715][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1248.739914][T20274] do_fast_syscall_32+0x33/0x70 [ 1248.744910][T20274] do_SYSENTER_32+0x1b/0x20 [ 1248.749466][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.755856][T20274] RIP: 0023:0xf7f05549 [ 1248.759953][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1248.779618][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1248.788106][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1248.796115][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1248.804119][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1248.812120][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1248.820121][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.828135][T20274] [ 1248.834029][T20274] Uninit was stored to memory at: [ 1248.839141][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.844758][T20274] get_compat_msghdr+0x10c/0x280 [ 1248.849938][T20274] ___sys_recvmsg+0x289/0xb40 [ 1248.854779][T20274] do_recvmmsg+0x7c9/0x1200 [ 1248.859370][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1248.864273][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.870673][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1248.875935][T20274] do_fast_syscall_32+0x33/0x70 [ 1248.880836][T20274] do_SYSENTER_32+0x1b/0x20 [ 1248.885550][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.892100][T20274] [ 1248.894438][T20274] Uninit was stored to memory at: [ 1248.899560][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1248.904571][T20284] not chained 710000 origins [ 1248.904896][T20274] get_compat_msghdr+0x10c/0x280 [ 1248.909316][T20284] CPU: 0 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1248.914379][T20274] ___sys_recvmsg+0x289/0xb40 [ 1248.924434][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.924461][T20284] Call Trace: [ 1248.924478][T20284] [ 1248.924494][T20284] dump_stack_lvl+0x200/0x28c [ 1248.929192][T20274] do_recvmmsg+0x7c9/0x1200 [ 1248.939255][T20284] dump_stack+0x29/0x2c [ 1248.939310][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1248.942689][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1248.945537][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1248.950195][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1248.954684][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1248.954746][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.954816][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1248.958952][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1248.964656][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1248.964719][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1248.969412][T20274] do_fast_syscall_32+0x33/0x70 [ 1248.975468][T20284] ? should_fail+0x79/0x9c0 [ 1248.975517][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1248.981928][T20274] do_SYSENTER_32+0x1b/0x20 [ 1248.986949][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1248.992912][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1248.998368][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1249.003486][T20274] [ 1249.008820][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1249.014687][T20274] Uninit was stored to memory at: [ 1249.019457][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1249.024192][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.029240][T20284] __msan_chain_origin+0xbd/0x140 [ 1249.033815][T20274] get_compat_msghdr+0x10c/0x280 [ 1249.039953][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.046348][T20274] ___sys_recvmsg+0x289/0xb40 [ 1249.052335][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.052401][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1249.054745][T20274] do_recvmmsg+0x7c9/0x1200 [ 1249.059844][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.064947][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.070679][T20284] ? __schedule+0x176c/0x21c0 [ 1249.075867][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.080795][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1249.085811][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1249.090822][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1249.095558][T20274] do_fast_syscall_32+0x33/0x70 [ 1249.100402][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1249.105172][T20274] do_SYSENTER_32+0x1b/0x20 [ 1249.109553][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1249.114299][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.118924][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.123658][T20274] [ 1249.129899][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1249.135067][T20274] Uninit was stored to memory at: [ 1249.140006][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1249.146028][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.150737][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1249.156140][T20274] get_compat_msghdr+0x10c/0x280 [ 1249.160516][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.166409][T20274] ___sys_recvmsg+0x289/0xb40 [ 1249.172673][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.172750][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.177232][T20274] do_recvmmsg+0x7c9/0x1200 [ 1249.179582][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.184699][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.189589][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.194764][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.199781][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.204728][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1249.209539][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.216137][T20274] do_fast_syscall_32+0x33/0x70 [ 1249.220725][T20284] RIP: 0023:0xf7f7e549 [ 1249.225511][T20274] do_SYSENTER_32+0x1b/0x20 [ 1249.231724][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1249.231772][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1249.231820][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1249.236316][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.241325][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1249.246085][T20274] [ 1249.250831][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1249.257270][T20274] Uninit was stored to memory at: [ 1249.261658][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1249.266820][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.272978][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1249.273025][T20284] [ 1249.275884][T20284] Uninit was stored to memory at: [ 1249.277974][T20274] get_compat_msghdr+0x10c/0x280 [ 1249.282487][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.286620][T20274] ___sys_recvmsg+0x289/0xb40 [ 1249.306340][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.314797][T20274] do_recvmmsg+0x7c9/0x1200 [ 1249.322883][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.329179][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.337256][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.339554][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.347718][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.352788][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1249.360753][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.365933][T20274] do_fast_syscall_32+0x33/0x70 [ 1249.374025][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.377130][T20274] do_SYSENTER_32+0x1b/0x20 [ 1249.382241][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.387140][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.392344][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.397069][T20274] [ 1249.397078][T20274] Uninit was stored to memory at: [ 1249.402103][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.406649][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.411249][T20284] [ 1249.411258][T20284] Uninit was stored to memory at: [ 1249.416003][T20274] get_compat_msghdr+0x10c/0x280 [ 1249.420574][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.426909][T20274] ___sys_recvmsg+0x289/0xb40 [ 1249.431682][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.436784][T20274] do_recvmmsg+0x7c9/0x1200 [ 1249.443218][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.448207][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.453322][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.457786][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.462723][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.469014][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1249.473604][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.476012][T20274] do_fast_syscall_32+0x33/0x70 [ 1249.481030][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.487435][T20274] do_SYSENTER_32+0x1b/0x20 [ 1249.492660][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.494971][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.499980][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.504984][T20274] [ 1249.504993][T20274] Uninit was stored to memory at: [ 1249.505068][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.510097][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.514859][T20274] get_compat_msghdr+0x10c/0x280 [ 1249.519797][T20284] [ 1249.519805][T20284] Uninit was stored to memory at: [ 1249.519877][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.524365][T20274] ___sys_recvmsg+0x289/0xb40 [ 1249.529049][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.533790][T20274] do_recvmmsg+0x7c9/0x1200 [ 1249.538297][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.544702][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.549382][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.554572][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.560903][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.565844][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1249.570953][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.575823][T20274] do_fast_syscall_32+0x33/0x70 [ 1249.580671][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.587079][T20274] do_SYSENTER_32+0x1b/0x20 [ 1249.591583][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.593991][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.599018][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.604194][T20274] [ 1249.604204][T20274] Local variable msg_sys created at: [ 1249.604219][T20274] do_recvmmsg+0xc9/0x1200 [ 1249.610525][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.615527][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1249.617864][T20284] [ 1249.617872][T20284] Uninit was stored to memory at: [ 1249.740373][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.745660][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.750672][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.755539][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.760183][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.765053][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.771452][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.776665][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.781585][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.786275][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.792779][T20284] [ 1249.795200][T20284] Uninit was stored to memory at: [ 1249.800302][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.805597][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.810590][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.815459][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.820128][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.825014][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.831431][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.836641][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.841543][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.846227][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.852738][T20284] [ 1249.855085][T20284] Uninit was stored to memory at: [ 1249.860525][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.865821][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.870815][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.875704][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.880264][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.885134][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.891545][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.896872][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.901879][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.906513][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.913029][T20284] [ 1249.915392][T20284] Uninit was stored to memory at: [ 1249.920485][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1249.925778][T20284] get_compat_msghdr+0x10c/0x280 [ 1249.930775][T20284] ___sys_recvmsg+0x289/0xb40 [ 1249.935642][T20284] do_recvmmsg+0x7c9/0x1200 [ 1249.940286][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1249.945145][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1249.951557][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1249.956771][T20284] do_fast_syscall_32+0x33/0x70 [ 1249.961674][T20284] do_SYSENTER_32+0x1b/0x20 [ 1249.966463][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1249.973047][T20284] [ 1249.975384][T20284] Local variable msg_sys created at: [ 1249.980674][T20284] do_recvmmsg+0xc9/0x1200 [ 1249.985323][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1250.101120][T20274] not chained 720000 origins [ 1250.105943][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1250.116145][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.126254][T20274] Call Trace: [ 1250.129553][T20274] [ 1250.132518][T20274] dump_stack_lvl+0x200/0x28c [ 1250.137253][T20274] dump_stack+0x29/0x2c [ 1250.141469][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1250.147247][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1250.153469][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.158639][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.164520][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1250.170118][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.175305][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.181174][T20274] ? should_fail+0x79/0x9c0 [ 1250.185717][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.190887][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1250.197191][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1250.203332][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.208498][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.214367][T20274] __msan_chain_origin+0xbd/0x140 [ 1250.219447][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.224966][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.229966][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1250.234701][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.239447][T20274] ? __schedule+0x176c/0x21c0 [ 1250.244187][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.249526][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.255389][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.260554][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.266421][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.270983][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1250.276078][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1250.281257][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1250.286860][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1250.291764][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.298336][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.303090][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.309623][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.314705][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.319609][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.324244][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.330625][T20274] RIP: 0023:0xf7f05549 [ 1250.334723][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1250.354386][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1250.362851][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1250.370856][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1250.378871][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.386873][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1250.394875][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.402917][T20274] [ 1250.408788][T20274] Uninit was stored to memory at: [ 1250.414269][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.419436][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.424525][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.429253][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.433915][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.438651][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.445134][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.450210][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.455231][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.459788][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.466290][T20274] [ 1250.468624][T20274] Uninit was stored to memory at: [ 1250.473836][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.478992][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.484072][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.488810][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.493446][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.498197][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.504784][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.509868][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.514881][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.519428][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.525905][T20274] [ 1250.528237][T20274] Uninit was stored to memory at: [ 1250.533493][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.538670][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.543766][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.548652][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.553445][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.558202][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.564717][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.569797][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.571075][T20284] not chained 730000 origins [ 1250.574831][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.574898][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.574956][T20274] [ 1250.574965][T20274] Uninit was stored to memory at: [ 1250.575045][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.579572][T20284] CPU: 0 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1250.584185][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.590483][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.592935][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.597823][T20284] Call Trace: [ 1250.597843][T20284] [ 1250.603022][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.613324][T20284] dump_stack_lvl+0x200/0x28c [ 1250.613387][T20284] dump_stack+0x29/0x2c [ 1250.618519][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.628566][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1250.628633][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1250.633428][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.636615][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.639537][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.644028][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.644099][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1250.648777][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.652921][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.652984][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.657778][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.663575][T20284] ? should_fail+0x79/0x9c0 [ 1250.663622][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.669720][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.676034][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1250.676109][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1250.681215][T20274] [ 1250.681225][T20274] Uninit was stored to memory at: [ 1250.686322][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.686385][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.686451][T20284] __msan_chain_origin+0xbd/0x140 [ 1250.692375][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.697771][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.702783][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.707824][T20284] get_compat_msghdr+0x10c/0x280 [ 1250.713805][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.718205][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1250.722778][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.727964][T20284] ___sys_recvmsg+0x289/0xb40 [ 1250.734845][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.740944][T20284] ? __schedule+0x176c/0x21c0 [ 1250.747116][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.749450][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.754566][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.759594][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.765550][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.770634][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.775824][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.781002][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1250.786331][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.791151][T20284] do_recvmmsg+0x7c9/0x1200 [ 1250.796081][T20274] [ 1250.801095][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1250.806110][T20274] Uninit was stored to memory at: [ 1250.811055][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1250.815948][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.820533][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1250.826986][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.831975][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.832064][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1250.832144][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.837160][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.842965][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1250.843028][T20284] do_fast_syscall_32+0x33/0x70 [ 1250.843083][T20284] do_SYSENTER_32+0x1b/0x20 [ 1250.847900][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.853000][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.853063][T20284] RIP: 0023:0xf7f7e549 [ 1250.853095][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1250.857596][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.863390][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1250.863438][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1250.863472][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1250.869790][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.874277][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.874306][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1250.874335][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.874379][T20284] [ 1250.876685][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1250.884172][T20284] Uninit was stored to memory at: [ 1250.886818][T20274] do_fast_syscall_32+0x33/0x70 [ 1250.892580][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.897490][T20274] do_SYSENTER_32+0x1b/0x20 [ 1250.902359][T20284] get_compat_msghdr+0x10c/0x280 [ 1250.907268][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1250.913952][T20284] ___sys_recvmsg+0x289/0xb40 [ 1250.918625][T20274] [ 1250.918636][T20274] Uninit was stored to memory at: [ 1250.925048][T20284] do_recvmmsg+0x7c9/0x1200 [ 1250.929772][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1250.934818][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1250.939638][T20274] get_compat_msghdr+0x10c/0x280 [ 1250.944242][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1250.948705][T20274] ___sys_recvmsg+0x289/0xb40 [ 1250.955131][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1250.959175][T20274] do_recvmmsg+0x7c9/0x1200 [ 1250.979004][T20284] do_fast_syscall_32+0x33/0x70 [ 1250.983910][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1250.992438][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.000475][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.008550][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.014933][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1251.022997][T20284] [ 1251.030936][T20274] do_fast_syscall_32+0x33/0x70 [ 1251.039004][T20284] Uninit was stored to memory at: [ 1251.042084][T20274] do_SYSENTER_32+0x1b/0x20 [ 1251.047161][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.052196][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.057046][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.062320][T20274] [ 1251.062331][T20274] Local variable msg_sys created at: [ 1251.062347][T20274] do_recvmmsg+0xc9/0x1200 [ 1251.066820][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.071825][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1251.078252][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.223065][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.227813][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.234344][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.239522][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.244647][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.249218][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.255779][T20284] [ 1251.258119][T20284] Uninit was stored to memory at: [ 1251.263339][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.268690][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.273833][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.278608][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.283294][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.288029][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.294629][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.299706][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.304743][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.309336][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.315848][T20284] [ 1251.318183][T20284] Uninit was stored to memory at: [ 1251.323407][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.328571][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.333715][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.338488][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.343178][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.347908][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.354429][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.359505][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.364532][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.369090][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.375612][T20284] [ 1251.377964][T20284] Uninit was stored to memory at: [ 1251.383272][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.388435][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.393552][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.398292][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.402974][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.407700][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.414217][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.419315][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.424343][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.428899][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.435466][T20284] [ 1251.437902][T20284] Uninit was stored to memory at: [ 1251.443132][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.448296][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.453559][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.458299][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.463159][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.467929][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.474456][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.479534][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.484633][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.489186][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.495737][T20284] [ 1251.498112][T20284] Uninit was stored to memory at: [ 1251.503355][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1251.508529][T20284] get_compat_msghdr+0x10c/0x280 [ 1251.513686][T20284] ___sys_recvmsg+0x289/0xb40 [ 1251.518448][T20284] do_recvmmsg+0x7c9/0x1200 [ 1251.523231][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.527968][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1251.534503][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1251.539580][T20284] do_fast_syscall_32+0x33/0x70 [ 1251.544614][T20284] do_SYSENTER_32+0x1b/0x20 [ 1251.549163][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1251.555686][T20284] [ 1251.558021][T20284] Local variable msg_sys created at: [ 1251.563442][T20284] do_recvmmsg+0xc9/0x1200 [ 1251.567912][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1251.940792][T20274] not chained 740000 origins [ 1251.945849][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1251.956047][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.966222][T20274] Call Trace: [ 1251.969521][T20274] [ 1251.972465][T20274] dump_stack_lvl+0x200/0x28c [ 1251.977196][T20274] dump_stack+0x29/0x2c [ 1251.981399][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1251.987172][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1251.993301][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1251.998467][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.004337][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1252.009941][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.015227][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.021097][T20274] ? should_fail+0x79/0x9c0 [ 1252.025640][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.030804][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1252.037116][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1252.043247][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.048412][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.054276][T20274] __msan_chain_origin+0xbd/0x140 [ 1252.059359][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.064539][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.069530][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1252.074265][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.079007][T20274] ? __schedule+0x176c/0x21c0 [ 1252.083741][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.088908][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.094771][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.099935][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.105801][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.110359][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1252.115449][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.120629][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1252.126333][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1252.131153][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.137772][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.142524][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.148926][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.154016][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.158916][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.163499][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.169887][T20274] RIP: 0023:0xf7f05549 [ 1252.173978][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1252.193644][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1252.202108][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1252.210120][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1252.218122][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.226123][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1252.234133][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1252.242153][T20274] [ 1252.249757][T20274] Uninit was stored to memory at: [ 1252.255578][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.260742][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.265925][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.270655][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.275296][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.280019][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.286503][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.291574][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.294299][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.296642][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.303094][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.307410][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.320078][T20274] [ 1252.322512][T20274] Uninit was stored to memory at: [ 1252.327608][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.333235][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.338232][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.343081][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.347667][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.352490][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.358961][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.364154][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.369052][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.373723][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.380108][T20274] [ 1252.382536][T20274] Uninit was stored to memory at: [ 1252.387656][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.392983][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.397977][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.402867][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.407432][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.412301][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.418683][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.423914][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.428811][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.433526][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.439922][T20274] [ 1252.442416][T20274] Uninit was stored to memory at: [ 1252.447512][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.452833][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.457823][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.462709][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.467262][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.472094][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.478485][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.483725][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.488625][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.493332][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.499746][T20274] [ 1252.502228][T20274] Uninit was stored to memory at: [ 1252.507323][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.512581][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.517584][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.522539][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.527181][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.532002][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.538392][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.543634][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.548587][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.553323][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.559709][T20274] [ 1252.562192][T20274] Uninit was stored to memory at: [ 1252.567300][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.572620][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.577611][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.582510][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.587073][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.591937][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.598335][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.603606][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.608509][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.613248][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.619634][T20274] [ 1252.622106][T20274] Uninit was stored to memory at: [ 1252.627292][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.632553][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.637543][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.642431][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.646985][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.651887][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.658396][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.663630][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.668526][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.673241][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1252.679709][T20274] [ 1252.682189][T20274] Local variable msg_sys created at: [ 1252.687484][T20274] do_recvmmsg+0xc9/0x1200 [ 1252.692041][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.773467][T20274] not chained 750000 origins [ 1252.778211][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1252.788607][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.798706][T20274] Call Trace: [ 1252.802067][T20274] [ 1252.805015][T20274] dump_stack_lvl+0x200/0x28c [ 1252.809750][T20274] dump_stack+0x29/0x2c [ 1252.813960][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1252.819834][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1252.825971][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.831154][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.837122][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1252.842738][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.847927][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.853807][T20274] ? should_fail+0x79/0x9c0 [ 1252.858368][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.863624][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1252.869929][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1252.876088][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.881262][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.887125][T20274] __msan_chain_origin+0xbd/0x140 [ 1252.892233][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1252.897421][T20274] get_compat_msghdr+0x10c/0x280 [ 1252.902414][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1252.907150][T20274] ___sys_recvmsg+0x289/0xb40 [ 1252.911903][T20274] ? __schedule+0x176c/0x21c0 [ 1252.916651][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.921824][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.927716][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.932883][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1252.938760][T20274] do_recvmmsg+0x7c9/0x1200 [ 1252.943322][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1252.948418][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1252.953680][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1252.959281][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1252.964102][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.970677][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1252.975437][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1252.981836][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1252.986911][T20274] do_fast_syscall_32+0x33/0x70 [ 1252.991809][T20274] do_SYSENTER_32+0x1b/0x20 [ 1252.996440][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.002818][T20274] RIP: 0023:0xf7f05549 [ 1253.006909][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1253.026723][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1253.035192][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1253.043245][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1253.051258][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.059268][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1253.067272][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.075291][T20274] [ 1253.080984][T20274] Uninit was stored to memory at: [ 1253.086470][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.091636][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.096721][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.101449][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.106111][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.110845][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.117347][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.122523][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.127423][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.132115][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.138502][T20274] [ 1253.140832][T20274] Uninit was stored to memory at: [ 1253.146269][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.151432][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.156592][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.161345][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.166070][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.170806][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.177366][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.182627][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.187530][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.192320][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.198716][T20274] [ 1253.201054][T20274] Uninit was stored to memory at: [ 1253.206397][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.211566][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.216727][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.221460][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.226188][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.230919][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.237472][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.242642][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.247541][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.252243][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.258628][T20274] [ 1253.260961][T20274] Uninit was stored to memory at: [ 1253.266246][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.271415][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.276574][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.281305][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.286028][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.290760][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.297331][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.302507][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.307407][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.312091][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.318476][T20274] [ 1253.320842][T20274] Uninit was stored to memory at: [ 1253.320849][T20284] not chained 760000 origins [ 1253.320869][T20284] CPU: 0 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1253.326115][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.330445][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1253.340663][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.345708][T20284] Call Trace: [ 1253.345725][T20284] [ 1253.345742][T20284] dump_stack_lvl+0x200/0x28c [ 1253.345804][T20284] dump_stack+0x29/0x2c [ 1253.355910][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.360756][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1253.364155][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.366975][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1253.371632][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.375777][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.375847][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1253.380519][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.386226][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1253.386289][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.390809][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.396863][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1253.396934][T20284] ? should_fail+0x79/0x9c0 [ 1253.401603][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.406762][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.406824][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1253.412735][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.418949][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1253.424557][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.429578][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.434680][T20274] [ 1253.440392][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1253.444958][T20274] Uninit was stored to memory at: [ 1253.449713][T20284] __msan_chain_origin+0xbd/0x140 [ 1253.454946][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.461033][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.465628][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.471587][T20284] get_compat_msghdr+0x10c/0x280 [ 1253.477964][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.482988][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1253.483053][T20284] ___sys_recvmsg+0x289/0xb40 [ 1253.485376][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.491184][T20284] ? __schedule+0x176c/0x21c0 [ 1253.496314][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.501219][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.506408][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.511446][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1253.516517][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.521312][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.526059][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.530632][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1253.535370][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.539787][T20284] do_recvmmsg+0x7c9/0x1200 [ 1253.544582][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.549130][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1253.554329][T20274] [ 1253.560560][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1253.566714][T20274] Uninit was stored to memory at: [ 1253.571593][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1253.576844][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.581518][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.587440][T20274] get_compat_msghdr+0x10c/0x280 [ 1253.591925][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1253.592007][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.596617][T20274] ___sys_recvmsg+0x289/0xb40 [ 1253.602953][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1253.603022][T20284] do_fast_syscall_32+0x33/0x70 [ 1253.603077][T20284] do_SYSENTER_32+0x1b/0x20 [ 1253.608083][T20274] do_recvmmsg+0x7c9/0x1200 [ 1253.610427][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.615652][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.620535][T20284] RIP: 0023:0xf7f7e549 [ 1253.625386][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.630397][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1253.636962][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1253.641889][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1253.641937][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1253.641971][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1253.646975][T20274] do_fast_syscall_32+0x33/0x70 [ 1253.653286][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.653316][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1253.653345][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.653389][T20284] [ 1253.658040][T20274] do_SYSENTER_32+0x1b/0x20 [ 1253.666023][T20284] Uninit was stored to memory at: [ 1253.668015][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.675020][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.677108][T20274] [ 1253.677118][T20274] Local variable msg_sys created at: [ 1253.683780][T20284] get_compat_msghdr+0x10c/0x280 [ 1253.688184][T20274] do_recvmmsg+0xc9/0x1200 [ 1253.692350][T20284] ___sys_recvmsg+0x289/0xb40 [ 1253.698644][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1253.718356][T20284] do_recvmmsg+0x7c9/0x1200 [ 1253.839240][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1253.844109][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.850517][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1253.855725][T20284] do_fast_syscall_32+0x33/0x70 [ 1253.860630][T20284] do_SYSENTER_32+0x1b/0x20 [ 1253.865311][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.871823][T20284] [ 1253.874167][T20284] Uninit was stored to memory at: [ 1253.879264][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.884600][T20284] get_compat_msghdr+0x10c/0x280 [ 1253.889681][T20284] ___sys_recvmsg+0x289/0xb40 [ 1253.894551][T20284] do_recvmmsg+0x7c9/0x1200 [ 1253.899111][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1253.903980][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.910378][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1253.915596][T20284] do_fast_syscall_32+0x33/0x70 [ 1253.920495][T20284] do_SYSENTER_32+0x1b/0x20 [ 1253.925253][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.931648][T20284] [ 1253.934207][T20284] Uninit was stored to memory at: [ 1253.939396][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1253.944748][T20284] get_compat_msghdr+0x10c/0x280 [ 1253.949749][T20284] ___sys_recvmsg+0x289/0xb40 [ 1253.954691][T20284] do_recvmmsg+0x7c9/0x1200 [ 1253.959251][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1253.964796][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1253.972016][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1253.979795][T20284] do_fast_syscall_32+0x33/0x70 [ 1253.984911][T20284] do_SYSENTER_32+0x1b/0x20 [ 1253.989468][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1253.996177][T20284] [ 1253.998519][T20284] Uninit was stored to memory at: [ 1254.003909][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.009161][T20284] get_compat_msghdr+0x10c/0x280 [ 1254.014348][T20284] ___sys_recvmsg+0x289/0xb40 [ 1254.019091][T20284] do_recvmmsg+0x7c9/0x1200 [ 1254.024727][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.029558][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.039593][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1254.045110][T20284] do_fast_syscall_32+0x33/0x70 [ 1254.051474][T20284] do_SYSENTER_32+0x1b/0x20 [ 1254.056364][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.062892][T20284] [ 1254.065260][T20284] Uninit was stored to memory at: [ 1254.070355][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.075719][T20284] get_compat_msghdr+0x10c/0x280 [ 1254.080729][T20284] ___sys_recvmsg+0x289/0xb40 [ 1254.085750][T20284] do_recvmmsg+0x7c9/0x1200 [ 1254.090357][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.095316][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.101870][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1254.107060][T20284] do_fast_syscall_32+0x33/0x70 [ 1254.112162][T20284] do_SYSENTER_32+0x1b/0x20 [ 1254.116749][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.123367][T20284] [ 1254.125704][T20284] Uninit was stored to memory at: [ 1254.130798][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.136165][T20284] get_compat_msghdr+0x10c/0x280 [ 1254.141187][T20284] ___sys_recvmsg+0x289/0xb40 [ 1254.147283][T20284] do_recvmmsg+0x7c9/0x1200 [ 1254.151975][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.156751][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.163354][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1254.168430][T20284] do_fast_syscall_32+0x33/0x70 [ 1254.173538][T20284] do_SYSENTER_32+0x1b/0x20 [ 1254.178190][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.184945][T20284] [ 1254.187289][T20284] Uninit was stored to memory at: [ 1254.192609][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.197784][T20284] get_compat_msghdr+0x10c/0x280 [ 1254.202987][T20284] ___sys_recvmsg+0x289/0xb40 [ 1254.207379][T20274] not chained 770000 origins [ 1254.207720][T20284] do_recvmmsg+0x7c9/0x1200 [ 1254.212711][T20274] CPU: 1 PID: 20274 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1254.216984][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.227126][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.227153][T20274] Call Trace: [ 1254.227170][T20274] [ 1254.227186][T20274] dump_stack_lvl+0x200/0x28c [ 1254.227252][T20274] dump_stack+0x29/0x2c [ 1254.232082][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.241992][T20274] kmsan_internal_chain_origin+0x78/0x120 [ 1254.242067][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1254.242130][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.245405][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1254.248333][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.253107][T20284] do_fast_syscall_32+0x33/0x70 [ 1254.257154][T20274] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1254.263571][T20284] do_SYSENTER_32+0x1b/0x20 [ 1254.269325][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.275746][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.280673][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.285855][T20284] [ 1254.291547][T20274] ? should_fail+0x79/0x9c0 [ 1254.296572][T20284] Local variable msg_sys created at: [ 1254.301961][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.302035][T20274] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1254.306559][T20284] do_recvmmsg+0xc9/0x1200 [ 1254.311668][T20274] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1254.318122][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.323794][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.323858][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.374023][T20274] __msan_chain_origin+0xbd/0x140 [ 1254.379115][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.384305][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.389306][T20274] ? do_recvmmsg+0x7c9/0x1200 [ 1254.394045][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.398790][T20274] ? __schedule+0x176c/0x21c0 [ 1254.403523][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.408690][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.414559][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.419741][T20274] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.425611][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.430174][T20274] ? filter_irq_stacks+0xb9/0x230 [ 1254.435276][T20274] ? kmsan_get_metadata+0x33/0x220 [ 1254.440449][T20274] ? __this_cpu_preempt_check+0x13/0x20 [ 1254.446055][T20274] ? __sys_recvmmsg+0xb9/0x6f0 [ 1254.450877][T20274] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.457449][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.462206][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.468611][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.473951][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.478851][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.483404][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.489785][T20274] RIP: 0023:0xf7f05549 [ 1254.493876][T20274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1254.513535][T20274] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1254.522022][T20274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1254.530028][T20274] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1254.538031][T20274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1254.546041][T20274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1254.554043][T20274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1254.562061][T20274] [ 1254.575566][T20274] Uninit was stored to memory at: [ 1254.580696][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.586747][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.591911][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.596645][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.601211][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.606112][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.612607][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.617692][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.622752][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.627423][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.633998][T20274] [ 1254.636349][T20274] Uninit was stored to memory at: [ 1254.641447][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.646782][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.651872][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.656607][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.661166][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.666057][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.672606][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.677695][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.682697][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.687278][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.693840][T20274] [ 1254.696200][T20274] Uninit was stored to memory at: [ 1254.701408][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.706849][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.712287][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.717030][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.721598][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.726504][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.732997][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.738077][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.743150][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.747751][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.754314][T20274] [ 1254.756656][T20274] Uninit was stored to memory at: [ 1254.762031][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.767205][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.772362][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.777097][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.781656][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.786564][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.787034][T20284] not chained 780000 origins [ 1254.793157][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.799888][T20284] CPU: 0 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1254.802884][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.812923][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.812950][T20284] Call Trace: [ 1254.812966][T20284] [ 1254.812982][T20284] dump_stack_lvl+0x200/0x28c [ 1254.817849][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.827904][T20284] dump_stack+0x29/0x2c [ 1254.827953][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1254.831262][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.834192][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1254.834259][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.838953][T20274] [ 1254.838962][T20274] Uninit was stored to memory at: [ 1254.843444][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.843516][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1254.847774][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.853445][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.853506][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.853575][T20284] ? should_fail+0x79/0x9c0 [ 1254.859959][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.866045][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.866107][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1254.871228][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.873550][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1254.873629][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.878652][T20274] do_recvmmsg+0x7c9/0x1200 [ 1254.884442][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.884509][T20284] __msan_chain_origin+0xbd/0x140 [ 1254.890057][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1254.895257][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.895337][T20284] get_compat_msghdr+0x10c/0x280 [ 1254.900450][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.906597][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1254.906665][T20284] ___sys_recvmsg+0x289/0xb40 [ 1254.906736][T20284] ? __schedule+0x176c/0x21c0 [ 1254.911218][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1254.916148][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.916212][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.921336][T20274] do_fast_syscall_32+0x33/0x70 [ 1254.927566][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.927629][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1254.932407][T20274] do_SYSENTER_32+0x1b/0x20 [ 1254.938386][T20284] do_recvmmsg+0x7c9/0x1200 [ 1254.943554][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1254.947965][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1254.953870][T20274] [ 1254.958770][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1254.963498][T20274] Uninit was stored to memory at: [ 1254.968531][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1254.973673][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1254.979798][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1254.984606][T20274] get_compat_msghdr+0x10c/0x280 [ 1254.989140][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1254.993890][T20274] ___sys_recvmsg+0x289/0xb40 [ 1254.998829][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.004129][T20274] do_recvmmsg+0x7c9/0x1200 [ 1255.009846][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.014728][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1255.019742][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.025625][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.030033][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.034611][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1255.040847][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.045985][T20274] do_fast_syscall_32+0x33/0x70 [ 1255.048198][T20284] RIP: 0023:0xf7f7e549 [ 1255.053431][T20274] do_SYSENTER_32+0x1b/0x20 [ 1255.058325][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1255.063185][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.068194][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1255.074767][T20274] [ 1255.079603][T20284] ORIG_RAX: 0000000000000151 [ 1255.079621][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1255.084356][T20274] Uninit was stored to memory at: [ 1255.088945][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1255.095418][T20274] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.099751][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.104877][T20274] get_compat_msghdr+0x10c/0x280 [ 1255.109510][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1255.114430][T20274] ___sys_recvmsg+0x289/0xb40 [ 1255.120662][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.125774][T20274] do_recvmmsg+0x7c9/0x1200 [ 1255.130702][T20284] [ 1255.137086][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1255.144746][T20284] Uninit was stored to memory at: [ 1255.146100][T20274] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.150524][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.170518][T20274] __do_fast_syscall_32+0x95/0xf0 [ 1255.170575][T20274] do_fast_syscall_32+0x33/0x70 [ 1255.170623][T20274] do_SYSENTER_32+0x1b/0x20 [ 1255.170671][T20274] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.170729][T20274] [ 1255.170738][T20274] Local variable msg_sys created at: [ 1255.170754][T20274] do_recvmmsg+0xc9/0x1200 [ 1255.170807][T20274] __sys_recvmmsg+0x520/0x6f0 [ 1255.177212][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.323589][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.328370][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.333056][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.337795][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.344526][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.349640][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.354673][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.359224][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.365750][T20284] [ 1255.368081][T20284] Uninit was stored to memory at: [ 1255.373388][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.378551][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.383713][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.388619][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.393373][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.398192][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.404781][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.409854][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.414943][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.419496][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.426063][T20284] [ 1255.428405][T20284] Uninit was stored to memory at: [ 1255.433696][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.438859][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.444052][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.448873][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.453640][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.458375][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.465056][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.470133][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.475227][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.479776][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.486358][T20284] [ 1255.488703][T20284] Uninit was stored to memory at: [ 1255.493989][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.499156][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.504488][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.509217][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.513972][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.518706][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.525311][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.530564][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.535668][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.540223][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.546972][T20284] [ 1255.549334][T20284] Uninit was stored to memory at: [ 1255.554557][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.559757][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.565030][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.569767][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.574519][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.579247][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.585879][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.590952][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.596050][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.600599][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.607188][T20284] [ 1255.609523][T20284] Uninit was stored to memory at: [ 1255.614818][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.619981][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.625188][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.630029][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.634786][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.639518][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.646110][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.651192][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.656292][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.660839][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.667413][T20284] [ 1255.669741][T20284] Uninit was stored to memory at: [ 1255.675056][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.680317][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.685623][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.690361][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.695162][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.699898][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.706508][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.711604][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.716748][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.721309][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.727917][T20284] [ 1255.730256][T20284] Local variable msg_sys created at: [ 1255.735796][T20284] do_recvmmsg+0xc9/0x1200 [ 1255.740265][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.765339][T20284] not chained 790000 origins [ 1255.771008][T20284] CPU: 1 PID: 20284 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 10:57:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:15 executing program 5: syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:57:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 10:57:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x00'], 0x50}}, 0x0) 10:57:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1255.781221][T20284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.791402][T20284] Call Trace: [ 1255.794707][T20284] [ 1255.797658][T20284] dump_stack_lvl+0x200/0x28c [ 1255.802393][T20284] dump_stack+0x29/0x2c [ 1255.806598][T20284] kmsan_internal_chain_origin+0x78/0x120 [ 1255.812380][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1255.818514][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.823703][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1255.829580][T20284] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1255.835187][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.840371][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1255.846249][T20284] ? should_fail+0x79/0x9c0 [ 1255.850797][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.855965][T20284] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1255.862269][T20284] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1255.868411][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.873675][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1255.879545][T20284] __msan_chain_origin+0xbd/0x140 [ 1255.884630][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1255.889830][T20284] get_compat_msghdr+0x10c/0x280 [ 1255.894824][T20284] ? do_recvmmsg+0x7c9/0x1200 [ 1255.899645][T20284] ___sys_recvmsg+0x289/0xb40 [ 1255.904382][T20284] ? __schedule+0x176c/0x21c0 [ 1255.909107][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.914268][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1255.920124][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.925290][T20284] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1255.931157][T20284] do_recvmmsg+0x7c9/0x1200 [ 1255.935716][T20284] ? filter_irq_stacks+0xb9/0x230 [ 1255.940807][T20284] ? kmsan_get_metadata+0x33/0x220 [ 1255.946064][T20284] ? __sys_recvmmsg+0xb9/0x6f0 [ 1255.951046][T20284] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.957606][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1255.962343][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1255.968733][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1255.973839][T20284] do_fast_syscall_32+0x33/0x70 [ 1255.978731][T20284] do_SYSENTER_32+0x1b/0x20 [ 1255.983273][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1255.989654][T20284] RIP: 0023:0xf7f7e549 [ 1255.993745][T20284] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1256.013407][T20284] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1256.022028][T20284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1256.030024][T20284] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1256.038023][T20284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.046021][T20284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1256.054014][T20284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.062024][T20284] [ 1256.068660][T20284] Uninit was stored to memory at: [ 1256.074423][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.079587][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.084682][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.089565][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.094239][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.099182][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.105691][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.110773][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.115786][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.120343][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.126835][T20284] [ 1256.129189][T20284] Uninit was stored to memory at: [ 1256.134386][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.139550][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.144663][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.149400][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.154047][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.158828][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.165320][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.170399][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.175405][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.180131][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.186644][T20284] [ 1256.188978][T20284] Uninit was stored to memory at: [ 1256.194172][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.199498][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.204679][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.209426][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.214109][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.218849][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.225368][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.230438][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.235440][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.240004][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.246504][T20284] [ 1256.248841][T20284] Uninit was stored to memory at: [ 1256.254045][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.259242][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.264340][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.269072][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.273733][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.278471][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.284956][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.290032][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.295035][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.299678][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.306175][T20284] [ 1256.308523][T20284] Uninit was stored to memory at: [ 1256.313742][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.318903][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.323996][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.328731][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.333439][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.338166][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.344672][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.349754][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.354769][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.359322][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.365821][T20284] [ 1256.368159][T20284] Uninit was stored to memory at: [ 1256.373354][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.378529][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.383618][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.388357][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.393027][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.397755][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.404253][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.409330][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.414331][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.418973][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.425531][T20284] [ 1256.427890][T20284] Uninit was stored to memory at: [ 1256.433269][T20284] __get_compat_msghdr+0x6ea/0x9e0 [ 1256.438434][T20284] get_compat_msghdr+0x10c/0x280 [ 1256.443587][T20284] ___sys_recvmsg+0x289/0xb40 [ 1256.448322][T20284] do_recvmmsg+0x7c9/0x1200 [ 1256.453253][T20284] __sys_recvmmsg+0x520/0x6f0 [ 1256.458007][T20284] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1256.464829][T20284] __do_fast_syscall_32+0x95/0xf0 [ 1256.469904][T20284] do_fast_syscall_32+0x33/0x70 [ 1256.475035][T20284] do_SYSENTER_32+0x1b/0x20 [ 1256.479594][T20284] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1256.486143][T20284] [ 1256.488480][T20284] Local variable msg_sys created at: [ 1256.493991][T20284] do_recvmmsg+0xc9/0x1200 [ 1256.498467][T20284] __sys_recvmmsg+0x520/0x6f0 10:57:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}]}, 0x3c}}, 0x0) [ 1256.812078][T12511] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1256.866931][T17885] usb 6-1: new high-speed USB device number 68 using dummy_hcd 10:57:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x00'], 0x50}}, 0x0) [ 1257.067220][T12511] usb 3-1: Using ep0 maxpacket: 16 10:57:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@func, @func, @func, @generic], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1257.132948][T17885] usb 6-1: Using ep0 maxpacket: 32 [ 1257.222706][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.232888][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1257.242334][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.283127][T17885] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1257.292344][T17885] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1257.301467][T17885] usb 6-1: config 1 has no interface number 1 [ 1257.308484][T17885] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:57:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x003\x00'], 0x50}}, 0x0) [ 1257.375496][T12511] usb 3-1: config 0 descriptor?? [ 1257.431621][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1257.613198][T17885] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1257.623171][T17885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.627173][T20305] UDC core: couldn't find an available UDC or it's busy: -16 [ 1257.631674][T17885] usb 6-1: Product: syz [ 1257.631997][T17885] usb 6-1: Manufacturer: syz [ 1257.639414][T20305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1257.644001][T17885] usb 6-1: SerialNumber: syz 10:57:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}}, 0x0) 10:57:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x003\x00'], 0x50}}, 0x0) [ 1258.182640][T17885] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1258.251429][T20331] UDC core: couldn't find an available UDC or it's busy: -16 [ 1258.259226][T20331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1258.335999][T17885] usb 6-1: USB disconnect, device number 68 [ 1258.506243][T20300] udevd[20300]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.826102][T20310] not chained 800000 origins [ 1258.830987][T20310] CPU: 0 PID: 20310 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1258.841200][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.851377][T20310] Call Trace: [ 1258.854683][T20310] [ 1258.857813][T20310] dump_stack_lvl+0x200/0x28c [ 1258.862558][T20310] dump_stack+0x29/0x2c [ 1258.866782][T20310] kmsan_internal_chain_origin+0x78/0x120 [ 1258.872574][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1258.878711][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.883900][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1258.889896][T20310] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1258.895658][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.900861][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1258.906749][T20310] ? should_fail+0x79/0x9c0 [ 1258.911399][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.916585][T20310] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1258.922992][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1258.929144][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.934330][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1258.940219][T20310] __msan_chain_origin+0xbd/0x140 [ 1258.945403][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1258.950601][T20310] get_compat_msghdr+0x10c/0x280 [ 1258.955611][T20310] ? do_recvmmsg+0x7c9/0x1200 [ 1258.960360][T20310] ___sys_recvmsg+0x289/0xb40 [ 1258.965114][T20310] ? __schedule+0x176c/0x21c0 [ 1258.969852][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.975025][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1258.981087][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1258.989394][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1258.996477][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.001066][T20310] ? filter_irq_stacks+0xb9/0x230 [ 1259.006349][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.011545][T20310] ? __sys_recvmmsg+0xb9/0x6f0 [ 1259.016469][T20310] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.023230][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.028044][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.034463][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.039555][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.044549][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.049129][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.055526][T20310] RIP: 0023:0xf7f05549 [ 1259.059697][T20310] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1259.079749][T20310] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1259.088220][T20310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1259.096256][T20310] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1259.104705][T20310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.112813][T20310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1259.121292][T20310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.130942][T20310] [ 1259.137722][T20310] Uninit was stored to memory at: [ 1259.143316][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.148672][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.153916][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.158668][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.163475][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.168434][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.175403][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.180700][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.185829][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.190538][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.197170][T20310] [ 1259.199579][T20310] Uninit was stored to memory at: [ 1259.204868][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.210039][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.215217][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.219953][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.224758][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.229494][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.236219][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.241298][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.246400][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.250956][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.257568][T20310] [ 1259.260059][T20310] Uninit was stored to memory at: [ 1259.265427][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.270592][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.275797][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.280531][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.285323][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.290059][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.296658][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.301873][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.306781][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.311334][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.317999][T20310] [ 1259.320519][T20310] Uninit was stored to memory at: [ 1259.325775][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.330945][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.336138][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.340873][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.345623][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.350361][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.356955][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.362177][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.367084][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.371648][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.378267][T20310] [ 1259.380608][T20310] Uninit was stored to memory at: [ 1259.385919][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.391083][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.396311][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.401042][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.405790][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.410522][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.417115][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.422333][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.427238][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.431976][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.438374][T20310] [ 1259.440717][T20310] Uninit was stored to memory at: [ 1259.446021][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.451195][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.456383][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.461121][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.465882][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.470614][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.477199][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.482413][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.487314][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.492038][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.498425][T20310] [ 1259.500766][T20310] Uninit was stored to memory at: [ 1259.506066][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.511244][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.516430][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.521182][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.525947][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.530681][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.537265][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.542484][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.547394][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.552155][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.558552][T20310] [ 1259.560891][T20310] Local variable msg_sys created at: [ 1259.566459][T20310] do_recvmmsg+0xc9/0x1200 [ 1259.570937][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.658815][ T3547] usb 3-1: USB disconnect, device number 13 [ 1259.780779][T20310] not chained 810000 origins [ 1259.785635][T20310] CPU: 0 PID: 20310 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1259.795836][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.805920][T20310] Call Trace: [ 1259.809215][T20310] [ 1259.812247][T20310] dump_stack_lvl+0x200/0x28c [ 1259.816978][T20310] dump_stack+0x29/0x2c [ 1259.821200][T20310] kmsan_internal_chain_origin+0x78/0x120 [ 1259.826983][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1259.833102][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.838352][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1259.844212][T20310] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1259.849810][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.854970][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1259.860834][T20310] ? should_fail+0x79/0x9c0 [ 1259.865373][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.870529][T20310] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1259.876822][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1259.882945][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.888110][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1259.893973][T20310] __msan_chain_origin+0xbd/0x140 [ 1259.899570][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1259.904747][T20310] get_compat_msghdr+0x10c/0x280 [ 1259.909739][T20310] ? do_recvmmsg+0x7c9/0x1200 [ 1259.914468][T20310] ___sys_recvmsg+0x289/0xb40 [ 1259.919207][T20310] ? asm_sysvec_call_function_single+0x12/0x20 [ 1259.925415][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.930572][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1259.936436][T20310] do_recvmmsg+0x7c9/0x1200 [ 1259.940989][T20310] ? filter_irq_stacks+0xb9/0x230 [ 1259.946074][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1259.951256][T20310] ? __sys_recvmmsg+0xb9/0x6f0 [ 1259.956066][T20310] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.962626][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1259.967362][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1259.973840][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1259.978910][T20310] do_fast_syscall_32+0x33/0x70 [ 1259.983803][T20310] do_SYSENTER_32+0x1b/0x20 [ 1259.988344][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1259.994719][T20310] RIP: 0023:0xf7f05549 [ 1259.998894][T20310] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1260.018544][T20310] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1260.026997][T20310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1260.034997][T20310] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1260.043078][T20310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.051160][T20310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1260.059156][T20310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.067169][T20310] [ 1260.072839][T20310] Uninit was stored to memory at: [ 1260.077966][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.084341][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.089332][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.094202][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.098777][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.103693][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.110091][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.115322][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.120257][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.124958][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.131387][T20310] [ 1260.133862][T20310] Uninit was stored to memory at: [ 1260.138994][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.144292][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.149294][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.154162][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.158752][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.163635][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.170058][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.175281][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.180179][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.184859][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.191271][T20310] [ 1260.193763][T20310] Uninit was stored to memory at: [ 1260.198858][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.204148][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.209140][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.214011][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.218569][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.223462][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.229852][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.235049][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.239947][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.244618][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.250995][T20310] [ 1260.253471][T20310] Uninit was stored to memory at: [ 1260.258579][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.263869][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.268855][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.273723][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.278294][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.283252][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.289640][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.294846][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.299776][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.304442][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.310823][T20310] [ 1260.313279][T20310] Uninit was stored to memory at: [ 1260.318364][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.323648][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.328646][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.333553][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.338116][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.343085][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.349484][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.354703][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.359607][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.364294][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.370679][T20310] [ 1260.373154][T20310] Uninit was stored to memory at: [ 1260.378246][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.383548][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.388576][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.393455][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.398022][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.402966][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.409369][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.414584][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.419484][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.424163][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.430592][T20310] [ 1260.433114][T20310] Uninit was stored to memory at: [ 1260.438209][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.443504][T20310] get_compat_msghdr+0x10c/0x280 [ 1260.448496][T20310] ___sys_recvmsg+0x289/0xb40 [ 1260.453443][T20310] do_recvmmsg+0x7c9/0x1200 [ 1260.458041][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.462973][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.469361][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1260.474645][T20310] do_fast_syscall_32+0x33/0x70 [ 1260.479635][T20310] do_SYSENTER_32+0x1b/0x20 [ 1260.484392][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.490781][T20310] [ 1260.493350][T20310] Local variable msg_sys created at: [ 1260.498742][T20310] do_recvmmsg+0xc9/0x1200 [ 1260.503413][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1260.691633][T20322] not chained 820000 origins [ 1260.696726][T20322] CPU: 1 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1260.706939][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.717036][T20322] Call Trace: [ 1260.720343][T20322] [ 1260.723384][T20322] dump_stack_lvl+0x200/0x28c [ 1260.728116][T20322] dump_stack+0x29/0x2c [ 1260.732314][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1260.738085][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1260.744215][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.749380][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1260.755252][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1260.760863][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.766031][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1260.771901][T20322] ? should_fail+0x79/0x9c0 [ 1260.776441][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.781603][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1260.788073][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1260.794218][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.799396][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1260.805353][T20322] __msan_chain_origin+0xbd/0x140 [ 1260.810440][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1260.815642][T20322] get_compat_msghdr+0x10c/0x280 [ 1260.820648][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1260.825515][T20322] ___sys_recvmsg+0x289/0xb40 [ 1260.830266][T20322] ? __schedule+0x176c/0x21c0 [ 1260.835004][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.840175][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1260.846046][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.851412][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1260.857292][T20322] do_recvmmsg+0x7c9/0x1200 [ 1260.861866][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1260.866987][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1260.872179][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1260.877004][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.883575][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1260.888331][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1260.894752][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1260.899837][T20322] do_fast_syscall_32+0x33/0x70 [ 1260.904741][T20322] do_SYSENTER_32+0x1b/0x20 [ 1260.909301][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1260.915683][T20322] RIP: 0023:0xf7f7e549 [ 1260.919778][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1260.939433][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1260.948008][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1260.956023][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1260.964026][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.972037][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1260.980042][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.988059][T20322] [ 1260.995615][T20322] Uninit was stored to memory at: [ 1261.000734][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.006682][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.011849][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.016686][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.021273][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.026115][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.032638][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.037719][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.042830][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.047381][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.053868][T20322] [ 1261.056202][T20322] Uninit was stored to memory at: [ 1261.061291][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.066563][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.071555][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.076457][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.081015][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.085944][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.092442][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.097522][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.102719][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.107406][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.113955][T20322] [ 1261.116292][T20322] Uninit was stored to memory at: [ 1261.121380][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.126714][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.131814][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.136543][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.141089][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.146084][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.152580][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.157665][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.162955][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.167512][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.174061][T20322] [ 1261.176398][T20322] Uninit was stored to memory at: [ 1261.181509][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.187041][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.192146][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.196882][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.201437][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.206371][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.212882][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.217981][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.223766][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.228325][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.234888][T20322] [ 1261.237225][T20322] Uninit was stored to memory at: [ 1261.242434][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.247594][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.252696][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.257425][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.262072][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.266797][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.273289][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.278421][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.283478][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.288110][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.294914][T20322] [ 1261.297246][T20322] Uninit was stored to memory at: [ 1261.302853][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.308016][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.313166][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.317897][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.322619][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.327363][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.333921][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.339000][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.344068][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.348612][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.355159][T20322] [ 1261.357495][T20322] Uninit was stored to memory at: [ 1261.362755][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.367921][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.373077][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.377804][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.382510][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.387236][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.393809][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.398968][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.404033][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.408578][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.415123][T20322] [ 1261.417456][T20322] Local variable msg_sys created at: [ 1261.422903][T20322] do_recvmmsg+0xc9/0x1200 [ 1261.427364][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.464114][T20322] not chained 830000 origins [ 1261.468762][T20322] CPU: 0 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1261.478970][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.489150][T20322] Call Trace: [ 1261.492457][T20322] [ 1261.495402][T20322] dump_stack_lvl+0x200/0x28c [ 1261.500148][T20322] dump_stack+0x29/0x2c [ 1261.504347][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1261.510130][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1261.516261][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.521426][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.527299][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1261.532906][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.538096][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.543981][T20322] ? should_fail+0x79/0x9c0 [ 1261.548533][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.553707][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1261.560012][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1261.566150][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.571313][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.577174][T20322] __msan_chain_origin+0xbd/0x140 [ 1261.582249][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.587430][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.592422][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1261.597238][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.601977][T20322] ? __schedule+0x176c/0x21c0 [ 1261.606700][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.611859][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.617736][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.622904][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.628767][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.633336][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1261.638439][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1261.643611][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1261.648423][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.654984][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.659831][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.666241][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.671327][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.676245][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.680808][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.687189][T20322] RIP: 0023:0xf7f7e549 [ 1261.691279][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1261.710928][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1261.719384][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1261.727387][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1261.735393][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.743390][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1261.751384][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.759393][T20322] [ 1261.765294][T20322] Uninit was stored to memory at: [ 1261.770401][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.773076][T20310] not chained 840000 origins [ 1261.776044][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.780150][T20310] CPU: 1 PID: 20310 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1261.785219][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.795314][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.795342][T20310] Call Trace: [ 1261.795359][T20310] [ 1261.795374][T20310] dump_stack_lvl+0x200/0x28c [ 1261.795437][T20310] dump_stack+0x29/0x2c [ 1261.800095][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.810140][T20310] kmsan_internal_chain_origin+0x78/0x120 [ 1261.810208][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1261.813628][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.816458][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.821112][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.825259][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.825348][T20310] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1261.829854][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.835558][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.835621][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.835689][T20310] ? should_fail+0x79/0x9c0 [ 1261.841829][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.846382][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.851476][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.857809][T20310] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1261.857877][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1261.857943][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.863821][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.869262][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.874378][T20322] [ 1261.879374][T20310] __msan_chain_origin+0xbd/0x140 [ 1261.885272][T20322] Uninit was stored to memory at: [ 1261.889670][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.894678][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1261.899622][T20310] get_compat_msghdr+0x10c/0x280 [ 1261.904280][T20322] get_compat_msghdr+0x10c/0x280 [ 1261.910406][T20310] ? do_recvmmsg+0x7c9/0x1200 [ 1261.916640][T20322] ___sys_recvmsg+0x289/0xb40 [ 1261.921633][T20310] ___sys_recvmsg+0x289/0xb40 [ 1261.928201][T20322] do_recvmmsg+0x7c9/0x1200 [ 1261.934006][T20310] ? __schedule+0x176c/0x21c0 [ 1261.934072][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.936388][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1261.941406][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.946519][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1261.951509][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.956709][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1261.961520][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1261.966539][T20322] do_fast_syscall_32+0x33/0x70 [ 1261.971103][T20310] do_recvmmsg+0x7c9/0x1200 [ 1261.975885][T20322] do_SYSENTER_32+0x1b/0x20 [ 1261.980455][T20310] ? filter_irq_stacks+0xb9/0x230 [ 1261.985220][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1261.989797][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1261.994997][T20322] [ 1261.999565][T20310] ? __sys_recvmmsg+0xb9/0x6f0 [ 1262.005446][T20322] Uninit was stored to memory at: [ 1262.011651][T20310] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.016923][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.021755][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.021833][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.027641][T20322] get_compat_msghdr+0x10c/0x280 [ 1262.032495][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.032556][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.037071][T20322] ___sys_recvmsg+0x289/0xb40 [ 1262.041558][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.046675][T20322] do_recvmmsg+0x7c9/0x1200 [ 1262.052880][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.052944][T20310] RIP: 0023:0xf7f05549 [ 1262.052976][T20310] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1262.058093][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.060407][T20310] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 [ 1262.065263][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.070160][T20310] ORIG_RAX: 0000000000000151 [ 1262.070178][T20310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1262.076751][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1262.081739][T20310] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1262.081771][T20310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1262.081800][T20310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1262.081829][T20310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1262.081874][T20310] [ 1262.086518][T20322] do_fast_syscall_32+0x33/0x70 [ 1262.095819][T20310] Uninit was stored to memory at: [ 1262.097861][T20322] do_SYSENTER_32+0x1b/0x20 [ 1262.103322][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.107835][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.112804][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.117319][T20322] [ 1262.117327][T20322] Uninit was stored to memory at: [ 1262.121932][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.128321][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.132394][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.152222][T20322] get_compat_msghdr+0x10c/0x280 [ 1262.156764][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.162943][T20322] ___sys_recvmsg+0x289/0xb40 [ 1262.169349][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.174110][T20322] do_recvmmsg+0x7c9/0x1200 [ 1262.182174][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.187203][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.187260][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.195310][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.203383][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1262.211329][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.219419][T20322] do_fast_syscall_32+0x33/0x70 [ 1262.222524][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.227361][T20322] do_SYSENTER_32+0x1b/0x20 [ 1262.232454][T20310] [ 1262.232463][T20310] Uninit was stored to memory at: [ 1262.232538][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.236959][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.242147][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.248476][T20322] [ 1262.248485][T20322] Uninit was stored to memory at: [ 1262.253576][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.256007][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.260959][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.265725][T20322] get_compat_msghdr+0x10c/0x280 [ 1262.270806][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.275404][T20322] ___sys_recvmsg+0x289/0xb40 [ 1262.280313][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.285176][T20322] do_recvmmsg+0x7c9/0x1200 [ 1262.289841][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.296275][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.300762][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.305887][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.310533][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.316952][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1262.321854][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.326892][T20322] do_fast_syscall_32+0x33/0x70 [ 1262.331396][T20310] [ 1262.331405][T20310] Uninit was stored to memory at: [ 1262.336337][T20322] do_SYSENTER_32+0x1b/0x20 [ 1262.342786][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.347237][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.349572][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.354683][T20322] [ 1262.359779][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.366212][T20322] Uninit was stored to memory at: [ 1262.371122][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.373605][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.378534][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.383299][T20322] get_compat_msghdr+0x10c/0x280 [ 1262.388384][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.393008][T20322] ___sys_recvmsg+0x289/0xb40 [ 1262.397917][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.402685][T20322] do_recvmmsg+0x7c9/0x1200 [ 1262.407343][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.413754][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.418233][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.423365][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.428029][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.432985][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1262.439292][T20310] [ 1262.439301][T20310] Uninit was stored to memory at: [ 1262.443973][T20322] do_fast_syscall_32+0x33/0x70 [ 1262.449048][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.455401][T20322] do_SYSENTER_32+0x1b/0x20 [ 1262.460222][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.462638][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.467649][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.472253][T20322] [ 1262.477430][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.483949][T20322] Uninit was stored to memory at: [ 1262.488855][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.491233][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.495918][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.500950][T20322] get_compat_msghdr+0x10c/0x280 [ 1262.505613][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.510740][T20322] ___sys_recvmsg+0x289/0xb40 [ 1262.515522][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.520472][T20322] do_recvmmsg+0x7c9/0x1200 [ 1262.526890][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.531569][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.536666][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.541255][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.546180][T20310] [ 1262.546191][T20310] Uninit was stored to memory at: [ 1262.546265][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.550983][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1262.555565][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.562121][T20322] do_fast_syscall_32+0x33/0x70 [ 1262.568504][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.573634][T20322] do_SYSENTER_32+0x1b/0x20 [ 1262.576032][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.581056][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.585981][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.591113][T20322] [ 1262.591123][T20322] Local variable msg_sys created at: [ 1262.595687][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.600643][T20322] do_recvmmsg+0xc9/0x1200 [ 1262.607053][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.611838][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1262.614149][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.772485][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.779998][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.786602][T20310] [ 1262.788948][T20310] Uninit was stored to memory at: [ 1262.794205][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.799379][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.804471][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.809205][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.813885][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.818630][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.825164][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.830250][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.835268][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.839820][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.846302][T20310] [ 1262.848638][T20310] Uninit was stored to memory at: [ 1262.853845][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1262.859189][T20310] get_compat_msghdr+0x10c/0x280 [ 1262.864284][T20310] ___sys_recvmsg+0x289/0xb40 [ 1262.869019][T20310] do_recvmmsg+0x7c9/0x1200 [ 1262.873687][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1262.878432][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1262.884933][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1262.890016][T20310] do_fast_syscall_32+0x33/0x70 [ 1262.895046][T20310] do_SYSENTER_32+0x1b/0x20 [ 1262.899595][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1262.906079][T20310] [ 1262.908417][T20310] Local variable msg_sys created at: [ 1262.913846][T20310] do_recvmmsg+0xc9/0x1200 [ 1262.918318][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.054210][T20322] not chained 850000 origins [ 1263.059031][T20322] CPU: 0 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1263.069225][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.079330][T20322] Call Trace: [ 1263.082893][T20322] [ 1263.085863][T20322] dump_stack_lvl+0x200/0x28c [ 1263.090684][T20322] dump_stack+0x29/0x2c [ 1263.094900][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1263.100691][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1263.106818][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.111985][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.118205][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1263.123818][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.128987][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.134854][T20322] ? should_fail+0x79/0x9c0 [ 1263.139394][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.144744][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1263.151049][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1263.157173][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.162358][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.168226][T20322] __msan_chain_origin+0xbd/0x140 [ 1263.173421][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.178612][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.183635][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1263.188473][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.193209][T20322] ? __schedule+0x176c/0x21c0 [ 1263.197942][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.203113][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.208978][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.214167][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.220041][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.224599][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1263.229690][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1263.234928][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1263.239741][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.246300][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.251047][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.257437][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.262510][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.267408][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.271951][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.278351][T20322] RIP: 0023:0xf7f7e549 [ 1263.282875][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1263.302527][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1263.303543][T20310] not chained 860000 origins [ 1263.310990][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1263.323617][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1263.331615][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.339614][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1263.347598][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.355593][T20322] [ 1263.358612][T20310] CPU: 1 PID: 20310 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1263.361918][T20322] Uninit was stored to memory at: [ 1263.368797][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.374305][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.383868][T20310] Call Trace: [ 1263.383885][T20310] [ 1263.383902][T20310] dump_stack_lvl+0x200/0x28c [ 1263.383964][T20310] dump_stack+0x29/0x2c [ 1263.389078][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.392350][T20310] kmsan_internal_chain_origin+0x78/0x120 [ 1263.392415][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1263.392478][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.395406][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.400065][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.404334][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.409160][T20310] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1263.414958][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.420918][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.426114][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.430682][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.436573][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.440981][T20310] ? should_fail+0x79/0x9c0 [ 1263.446609][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.451172][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.456366][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.462578][T20310] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1263.462648][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1263.468466][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.473479][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.473541][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.478070][T20322] [ 1263.478079][T20322] Uninit was stored to memory at: [ 1263.482905][T20310] __msan_chain_origin+0xbd/0x140 [ 1263.482968][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.488172][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.492617][T20310] get_compat_msghdr+0x10c/0x280 [ 1263.492682][T20310] ? do_recvmmsg+0x7c9/0x1200 [ 1263.498922][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.504979][T20310] ___sys_recvmsg+0x289/0xb40 [ 1263.505053][T20310] ? __schedule+0x176c/0x21c0 [ 1263.511404][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.516510][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.516574][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.522516][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.524736][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.529751][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.534768][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1263.534844][T20310] do_recvmmsg+0x7c9/0x1200 [ 1263.534907][T20310] ? filter_irq_stacks+0xb9/0x230 [ 1263.540026][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.545131][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1263.545203][T20310] ? __sys_recvmmsg+0xb9/0x6f0 [ 1263.550157][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.554826][T20310] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.554899][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.554975][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.559868][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.564540][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1263.564600][T20310] do_fast_syscall_32+0x33/0x70 [ 1263.564655][T20310] do_SYSENTER_32+0x1b/0x20 [ 1263.569297][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.573955][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.574018][T20310] RIP: 0023:0xf7f05549 [ 1263.574050][T20310] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1263.579254][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.585054][T20310] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1263.585109][T20310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1263.585141][T20310] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1263.585169][T20310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.585197][T20310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1263.585222][T20310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.585263][T20310] [ 1263.588282][T20310] Uninit was stored to memory at: [ 1263.589800][T20322] [ 1263.589809][T20322] Uninit was stored to memory at: [ 1263.589888][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.595375][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.599710][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.605587][T20310] get_compat_msghdr+0x10c/0x280 [ 1263.610096][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.615192][T20310] ___sys_recvmsg+0x289/0xb40 [ 1263.621513][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.626708][T20310] do_recvmmsg+0x7c9/0x1200 [ 1263.631482][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.636571][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.643171][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.647815][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.654233][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.659060][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1263.664170][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.669005][T20310] do_fast_syscall_32+0x33/0x70 [ 1263.673594][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.678077][T20310] do_SYSENTER_32+0x1b/0x20 [ 1263.684488][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.688519][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.708273][T20322] [ 1263.708286][T20322] Uninit was stored to memory at: [ 1263.714832][T20310] [ 1263.714844][T20310] Uninit was stored to memory at: [ 1263.714926][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.723522][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.731522][T20310] get_compat_msghdr+0x10c/0x280 [ 1263.739616][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.747655][T20310] ___sys_recvmsg+0x289/0xb40 [ 1263.755738][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.763908][T20310] do_recvmmsg+0x7c9/0x1200 [ 1263.766944][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.772055][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.774385][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.779414][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.784615][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.789701][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1263.794735][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.799650][T20310] do_fast_syscall_32+0x33/0x70 [ 1263.804603][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.809251][T20310] do_SYSENTER_32+0x1b/0x20 [ 1263.813844][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.818487][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.823363][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.828009][T20310] [ 1263.828018][T20310] Uninit was stored to memory at: [ 1263.834444][T20322] [ 1263.840804][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.845851][T20322] Uninit was stored to memory at: [ 1263.850840][T20310] get_compat_msghdr+0x10c/0x280 [ 1263.855841][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.860734][T20310] ___sys_recvmsg+0x289/0xb40 [ 1263.865331][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.869812][T20310] do_recvmmsg+0x7c9/0x1200 [ 1263.876345][T20322] ___sys_recvmsg+0x289/0xb40 [ 1263.882730][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.885099][T20322] do_recvmmsg+0x7c9/0x1200 [ 1263.890123][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.892549][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1263.897535][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1263.902743][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1263.907948][T20310] do_fast_syscall_32+0x33/0x70 [ 1263.912986][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1263.917889][T20310] do_SYSENTER_32+0x1b/0x20 [ 1263.922654][T20322] do_fast_syscall_32+0x33/0x70 [ 1263.927300][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.931903][T20322] do_SYSENTER_32+0x1b/0x20 [ 1263.936374][T20310] [ 1263.936383][T20310] Uninit was stored to memory at: [ 1263.941034][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1263.945867][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.952236][T20322] [ 1263.958529][T20310] get_compat_msghdr+0x10c/0x280 [ 1263.963746][T20322] Uninit was stored to memory at: [ 1263.968757][T20310] ___sys_recvmsg+0x289/0xb40 [ 1263.973784][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1263.978562][T20310] do_recvmmsg+0x7c9/0x1200 [ 1263.983171][T20322] get_compat_msghdr+0x10c/0x280 [ 1263.987641][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1263.994157][T20322] ___sys_recvmsg+0x289/0xb40 [ 1264.000451][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.002867][T20322] do_recvmmsg+0x7c9/0x1200 [ 1264.007858][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1264.010172][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1264.015366][T20310] do_fast_syscall_32+0x33/0x70 [ 1264.020394][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.025403][T20310] do_SYSENTER_32+0x1b/0x20 [ 1264.030516][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1264.035452][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.040393][T20322] do_fast_syscall_32+0x33/0x70 [ 1264.044965][T20310] [ 1264.044974][T20310] Uninit was stored to memory at: [ 1264.045049][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.049648][T20322] do_SYSENTER_32+0x1b/0x20 [ 1264.054470][T20310] get_compat_msghdr+0x10c/0x280 [ 1264.058993][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.065392][T20310] ___sys_recvmsg+0x289/0xb40 [ 1264.070096][T20322] [ 1264.070105][T20322] Uninit was stored to memory at: [ 1264.075366][T20310] do_recvmmsg+0x7c9/0x1200 [ 1264.081867][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.086637][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1264.091641][T20322] get_compat_msghdr+0x10c/0x280 [ 1264.096213][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.100958][T20322] ___sys_recvmsg+0x289/0xb40 [ 1264.107391][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1264.112054][T20322] do_recvmmsg+0x7c9/0x1200 [ 1264.114376][T20310] do_fast_syscall_32+0x33/0x70 [ 1264.119384][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1264.125797][T20310] do_SYSENTER_32+0x1b/0x20 [ 1264.130904][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.133304][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.138330][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1264.143440][T20310] [ 1264.143450][T20310] Uninit was stored to memory at: [ 1264.143524][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.148213][T20322] do_fast_syscall_32+0x33/0x70 [ 1264.153571][T20310] get_compat_msghdr+0x10c/0x280 [ 1264.158095][T20322] do_SYSENTER_32+0x1b/0x20 [ 1264.163101][T20310] ___sys_recvmsg+0x289/0xb40 [ 1264.167781][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.172532][T20310] do_recvmmsg+0x7c9/0x1200 [ 1264.178857][T20322] [ 1264.178868][T20322] Local variable msg_sys created at: [ 1264.183607][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1264.188539][T20322] do_recvmmsg+0xc9/0x1200 [ 1264.193281][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.198130][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1264.204525][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1264.414891][T20310] do_fast_syscall_32+0x33/0x70 [ 1264.419795][T20310] do_SYSENTER_32+0x1b/0x20 [ 1264.424491][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.430879][T20310] [ 1264.433374][T20310] Uninit was stored to memory at: [ 1264.438467][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.443815][T20310] get_compat_msghdr+0x10c/0x280 [ 1264.448800][T20310] ___sys_recvmsg+0x289/0xb40 [ 1264.453641][T20310] do_recvmmsg+0x7c9/0x1200 [ 1264.458197][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1264.463086][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.469480][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1264.474770][T20310] do_fast_syscall_32+0x33/0x70 [ 1264.479683][T20310] do_SYSENTER_32+0x1b/0x20 [ 1264.484444][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.490845][T20310] [ 1264.493353][T20310] Local variable msg_sys created at: [ 1264.498652][T20310] do_recvmmsg+0xc9/0x1200 [ 1264.503302][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1264.637076][T20322] not chained 870000 origins [ 1264.642049][T20322] CPU: 1 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1264.652245][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.662333][T20322] Call Trace: [ 1264.665659][T20322] [ 1264.668601][T20322] dump_stack_lvl+0x200/0x28c [ 1264.673332][T20322] dump_stack+0x29/0x2c [ 1264.677536][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1264.683326][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1264.689462][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.694626][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1264.700495][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1264.706097][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.711616][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1264.717488][T20322] ? should_fail+0x79/0x9c0 [ 1264.722031][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.727197][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1264.733497][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1264.739647][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.744826][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1264.750697][T20322] __msan_chain_origin+0xbd/0x140 [ 1264.755783][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.760975][T20322] get_compat_msghdr+0x10c/0x280 [ 1264.765967][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1264.770700][T20322] ___sys_recvmsg+0x289/0xb40 [ 1264.775442][T20322] ? __schedule+0x176c/0x21c0 [ 1264.780190][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.785372][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1264.791236][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.796409][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1264.802282][T20322] do_recvmmsg+0x7c9/0x1200 [ 1264.806886][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1264.812003][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1264.817175][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1264.821990][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.828553][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1264.833325][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.839726][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1264.844824][T20322] do_fast_syscall_32+0x33/0x70 [ 1264.849727][T20322] do_SYSENTER_32+0x1b/0x20 [ 1264.854370][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.860751][T20322] RIP: 0023:0xf7f7e549 [ 1264.864841][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1264.884497][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1264.892969][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1264.900976][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1264.908990][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1264.916994][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1264.925354][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1264.934508][T20322] [ 1264.940327][T20322] Uninit was stored to memory at: [ 1264.945908][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1264.951080][T20322] get_compat_msghdr+0x10c/0x280 [ 1264.956185][T20322] ___sys_recvmsg+0x289/0xb40 [ 1264.960922][T20322] do_recvmmsg+0x7c9/0x1200 [ 1264.965585][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1264.970313][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1264.976800][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1264.981952][T20322] do_fast_syscall_32+0x33/0x70 [ 1264.986844][T20322] do_SYSENTER_32+0x1b/0x20 [ 1264.991395][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1264.998082][T20322] [ 1265.000428][T20322] Uninit was stored to memory at: [ 1265.005628][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.010879][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.015966][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.020697][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.025344][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.030073][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.036657][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.041835][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.046740][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.051285][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.057843][T20322] [ 1265.060185][T20322] Uninit was stored to memory at: [ 1265.065454][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.069717][T20310] not chained 880000 origins [ 1265.070611][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.075439][T20310] CPU: 0 PID: 20310 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1265.080272][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.090414][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.090442][T20310] Call Trace: [ 1265.090458][T20310] [ 1265.090475][T20310] dump_stack_lvl+0x200/0x28c [ 1265.090536][T20310] dump_stack+0x29/0x2c [ 1265.095259][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.105232][T20310] kmsan_internal_chain_origin+0x78/0x120 [ 1265.105300][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1265.108603][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.111524][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.117756][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.122489][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1265.122569][T20310] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1265.127071][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.132779][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.132842][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1265.132910][T20310] ? should_fail+0x79/0x9c0 [ 1265.138959][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.143635][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.143698][T20310] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1265.148820][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.155148][T20310] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1265.155218][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.155277][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1265.161054][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.166583][T20310] __msan_chain_origin+0xbd/0x140 [ 1265.166646][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.171682][T20322] [ 1265.171841][T20322] Uninit was stored to memory at: [ 1265.176816][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.182811][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.187092][T20310] ? do_recvmmsg+0x7c9/0x1200 [ 1265.192011][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.197020][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.203410][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.207823][T20310] ? __schedule+0x176c/0x21c0 [ 1265.213940][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.219055][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.224921][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.231259][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1265.236434][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.241467][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.243879][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.248800][T20310] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1265.253907][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.258898][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.263695][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.268491][T20310] ? filter_irq_stacks+0xb9/0x230 [ 1265.273232][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.277823][T20310] ? kmsan_get_metadata+0x33/0x220 [ 1265.282591][T20322] [ 1265.286965][T20310] ? __sys_recvmmsg+0xb9/0x6f0 [ 1265.292138][T20322] Uninit was stored to memory at: [ 1265.296715][T20310] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.302674][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.308853][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.314030][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.318971][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.324847][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.329596][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.334194][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.338562][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.343846][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.350071][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.355244][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.357497][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.362346][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.367275][T20310] RIP: 0023:0xf7f05549 [ 1265.374195][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.379201][T20310] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1265.383991][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.388790][T20310] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 [ 1265.395184][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.399760][T20310] ORIG_RAX: 0000000000000151 [ 1265.404860][T20322] [ 1265.409259][T20310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1265.414176][T20322] Uninit was stored to memory at: [ 1265.418755][T20310] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1265.423390][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.429551][T20310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.435992][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.440875][T20310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1265.445105][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.449857][T20310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.470076][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.474489][T20310] [ 1265.477388][T20310] Uninit was stored to memory at: [ 1265.480626][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.487393][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.491841][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.494173][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.502238][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.507727][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.515846][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.520962][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.529027][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.534066][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.542140][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.546826][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.554881][T20322] [ 1265.554891][T20322] Uninit was stored to memory at: [ 1265.554964][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.559386][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.562493][T20322] get_compat_msghdr+0x10c/0x280 [ 1265.567520][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.572274][T20322] ___sys_recvmsg+0x289/0xb40 [ 1265.577391][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.583961][T20322] do_recvmmsg+0x7c9/0x1200 [ 1265.588905][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.594000][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.598723][T20310] [ 1265.598733][T20310] Uninit was stored to memory at: [ 1265.603730][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.608311][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.612818][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1265.617498][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.623891][T20322] do_fast_syscall_32+0x33/0x70 [ 1265.630223][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.632630][T20322] do_SYSENTER_32+0x1b/0x20 [ 1265.637666][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.642856][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.647881][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.652887][T20322] [ 1265.652898][T20322] Local variable msg_sys created at: [ 1265.652913][T20322] do_recvmmsg+0xc9/0x1200 [ 1265.657739][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.662480][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1265.666987][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.770861][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.775931][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.780482][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.787008][T20310] [ 1265.789342][T20310] Uninit was stored to memory at: [ 1265.794572][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.800032][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.805160][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.809899][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.814582][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.819407][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.825930][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.831007][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.836046][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.840691][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.847220][T20310] [ 1265.849558][T20310] Uninit was stored to memory at: [ 1265.854775][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.859934][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.865129][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.869868][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.874636][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.879377][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.885971][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.891072][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.896200][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.900753][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.907320][T20310] [ 1265.909655][T20310] Uninit was stored to memory at: [ 1265.914966][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.920148][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.925394][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.930136][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.934884][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.939635][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1265.946159][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1265.951330][T20310] do_fast_syscall_32+0x33/0x70 [ 1265.956431][T20310] do_SYSENTER_32+0x1b/0x20 [ 1265.960984][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1265.967574][T20310] [ 1265.969912][T20310] Uninit was stored to memory at: [ 1265.975211][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1265.980378][T20310] get_compat_msghdr+0x10c/0x280 [ 1265.985573][T20310] ___sys_recvmsg+0x289/0xb40 [ 1265.990323][T20310] do_recvmmsg+0x7c9/0x1200 [ 1265.995081][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1265.999836][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.006416][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1266.011494][T20310] do_fast_syscall_32+0x33/0x70 [ 1266.016790][T20310] do_SYSENTER_32+0x1b/0x20 [ 1266.021339][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.028038][T20310] [ 1266.030379][T20310] Uninit was stored to memory at: [ 1266.035660][T20310] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.040915][T20310] get_compat_msghdr+0x10c/0x280 [ 1266.046658][T20310] ___sys_recvmsg+0x289/0xb40 [ 1266.051392][T20310] do_recvmmsg+0x7c9/0x1200 [ 1266.057228][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1266.062197][T20310] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.068598][T20310] __do_fast_syscall_32+0x95/0xf0 [ 1266.073894][T20310] do_fast_syscall_32+0x33/0x70 [ 1266.079238][T20310] do_SYSENTER_32+0x1b/0x20 [ 1266.084017][T20310] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.090403][T20310] [ 1266.092928][T20310] Local variable msg_sys created at: [ 1266.098224][T20310] do_recvmmsg+0xc9/0x1200 [ 1266.102842][T20310] __sys_recvmmsg+0x520/0x6f0 [ 1266.156189][T20322] not chained 890000 origins [ 1266.160832][T20322] CPU: 0 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1266.171122][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.181227][T20322] Call Trace: [ 1266.184540][T20322] [ 1266.187495][T20322] dump_stack_lvl+0x200/0x28c [ 1266.192239][T20322] dump_stack+0x29/0x2c [ 1266.196448][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1266.202257][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1266.208402][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.213571][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1266.219578][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1266.225196][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.230367][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1266.236245][T20322] ? should_fail+0x79/0x9c0 [ 1266.240874][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.246066][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1266.252566][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1266.258697][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.263876][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1266.270205][T20322] __msan_chain_origin+0xbd/0x140 [ 1266.275753][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.280986][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.286071][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1266.290829][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.295571][T20322] ? __schedule+0x176c/0x21c0 [ 1266.300305][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.305559][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1266.311511][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.316679][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1266.322556][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.327404][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1266.332596][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1266.337861][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1266.342680][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.349513][T20322] __sys_recvmmsg+0x520/0x6f0 10:57:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB='2\x003\x00'], 0x50}}, 0x0) 10:57:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x0) 10:57:26 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='rpm_return_int\x00', r0}, 0x10) 10:57:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1266.354267][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.360676][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.365770][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.370675][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.375235][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.381623][T20322] RIP: 0023:0xf7f7e549 [ 1266.385718][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1266.405383][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1266.413853][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1266.421985][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1266.430013][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.439477][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1266.447601][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.455643][T20322] [ 1266.461353][T20322] Uninit was stored to memory at: [ 1266.468798][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.474243][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.479254][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.484165][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.488743][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.493627][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.500035][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.505252][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.510188][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.514885][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.521275][T20322] [ 1266.523849][T20322] Uninit was stored to memory at: [ 1266.528965][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.534294][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.539310][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.544210][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.548788][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.553788][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.560191][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.565431][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.570345][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.575072][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.581471][T20322] [ 1266.583945][T20322] Uninit was stored to memory at: [ 1266.589086][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.594405][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.599407][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.604301][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.608965][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.614132][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.620650][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.625869][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.630876][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.635638][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.642170][T20322] [ 1266.644521][T20322] Uninit was stored to memory at: [ 1266.649715][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.655091][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.660090][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.665164][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.669740][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.674692][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.681090][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.686386][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.691299][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.696147][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.702720][T20322] [ 1266.706991][T20322] Uninit was stored to memory at: [ 1266.712308][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.717482][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.722870][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.727620][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.732413][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.737169][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.743703][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.748805][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.753981][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.758540][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.765167][T20322] [ 1266.767613][T20322] Uninit was stored to memory at: [ 1266.772917][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.778171][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.783361][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.788228][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.793029][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.797801][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.804413][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.809497][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.814619][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.819188][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.825723][T20322] [ 1266.828065][T20322] Uninit was stored to memory at: [ 1266.833304][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1266.838475][T20322] get_compat_msghdr+0x10c/0x280 [ 1266.843683][T20322] ___sys_recvmsg+0x289/0xb40 [ 1266.848453][T20322] do_recvmmsg+0x7c9/0x1200 [ 1266.853416][T20322] __sys_recvmmsg+0x520/0x6f0 10:57:26 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000300)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) syncfs(r0) [ 1266.858160][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1266.864705][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1266.869938][T20322] do_fast_syscall_32+0x33/0x70 [ 1266.875147][T20322] do_SYSENTER_32+0x1b/0x20 [ 1266.879719][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1266.886338][T20322] [ 1266.888858][T20322] Local variable msg_sys created at: [ 1266.894387][T20322] do_recvmmsg+0xc9/0x1200 [ 1266.898866][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1266.902339][T12511] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1267.162189][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1267.303250][T20322] not chained 900000 origins [ 1267.307259][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.308012][T20322] CPU: 0 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1267.317804][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1267.327891][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.327922][T20322] Call Trace: [ 1267.327938][T20322] [ 1267.327954][T20322] dump_stack_lvl+0x200/0x28c [ 1267.328017][T20322] dump_stack+0x29/0x2c [ 1267.328064][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1267.328128][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1267.328190][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.328258][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1267.337416][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.347376][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1267.347446][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.347508][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1267.409938][T20322] ? should_fail+0x79/0x9c0 [ 1267.414516][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.419794][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1267.426117][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1267.432369][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.437556][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1267.443443][T20322] __msan_chain_origin+0xbd/0x140 [ 1267.448567][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.453795][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.458893][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1267.463640][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.468412][T20322] ? __schedule+0x176c/0x21c0 [ 1267.473175][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.478367][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1267.484341][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.485205][T12511] usb 3-1: config 0 descriptor?? [ 1267.489601][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1267.500502][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.505248][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1267.510349][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1267.515526][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1267.520348][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.526925][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.531686][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.538102][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.543202][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.548306][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.552876][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.559430][T20322] RIP: 0023:0xf7f7e549 [ 1267.563541][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1267.583557][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1267.592049][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1267.600120][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1267.608170][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.616187][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1267.624281][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.632309][T20322] [ 1267.632848][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1267.638852][T20322] Uninit was stored to memory at: [ 1267.648420][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.653754][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.658765][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.663688][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.668264][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.673140][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.679543][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.684764][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.689921][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.694645][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.701069][T20322] [ 1267.703621][T20322] Uninit was stored to memory at: [ 1267.708869][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.714184][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.719181][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.724110][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.728681][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.733564][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.740000][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.745224][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.750163][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.754875][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.761354][T20322] [ 1267.763846][T20322] Uninit was stored to memory at: [ 1267.768971][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.774280][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.779272][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.784170][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.788746][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.793640][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.800065][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.805287][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.810198][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.814887][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.821278][T20322] [ 1267.823773][T20322] Uninit was stored to memory at: [ 1267.826539][T20342] UDC core: couldn't find an available UDC or it's busy: -16 [ 1267.828872][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.828932][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.836657][T20342] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1267.841595][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.859036][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.863810][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.868640][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.875246][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.880329][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.885365][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.890002][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.896589][T20322] [ 1267.898931][T20322] Uninit was stored to memory at: [ 1267.904361][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.909527][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.914790][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.919554][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.924313][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.929053][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.935652][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1267.940765][T20322] do_fast_syscall_32+0x33/0x70 [ 1267.945867][T20322] do_SYSENTER_32+0x1b/0x20 [ 1267.950435][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1267.957039][T20322] [ 1267.959375][T20322] Uninit was stored to memory at: [ 1267.964607][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1267.969781][T20322] get_compat_msghdr+0x10c/0x280 [ 1267.974972][T20322] ___sys_recvmsg+0x289/0xb40 [ 1267.979718][T20322] do_recvmmsg+0x7c9/0x1200 [ 1267.984678][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1267.989421][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1267.996209][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1268.001300][T20322] do_fast_syscall_32+0x33/0x70 [ 1268.006347][T20322] do_SYSENTER_32+0x1b/0x20 [ 1268.010900][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1268.017430][T20322] [ 1268.019764][T20322] Uninit was stored to memory at: [ 1268.025011][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1268.030184][T20322] get_compat_msghdr+0x10c/0x280 [ 1268.035315][T20322] ___sys_recvmsg+0x289/0xb40 [ 1268.040050][T20322] do_recvmmsg+0x7c9/0x1200 [ 1268.044742][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1268.049479][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1268.056015][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1268.061113][T20322] do_fast_syscall_32+0x33/0x70 [ 1268.066389][T20322] do_SYSENTER_32+0x1b/0x20 [ 1268.070947][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1268.077483][T20322] [ 1268.079824][T20322] Local variable msg_sys created at: [ 1268.085264][T20322] do_recvmmsg+0xc9/0x1200 [ 1268.089741][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1268.545981][T20354] UDC core: couldn't find an available UDC or it's busy: -16 [ 1268.553829][T20354] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1268.910225][T20349] not chained 910000 origins [ 1268.915035][T20349] CPU: 1 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1268.925242][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.935344][T20349] Call Trace: [ 1268.938653][T20349] [ 1268.941615][T20349] dump_stack_lvl+0x200/0x28c [ 1268.946358][T20349] dump_stack+0x29/0x2c [ 1268.950567][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1268.956361][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1268.962498][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1268.967686][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1268.973593][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1268.979217][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1268.984407][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1268.990306][T20349] ? should_fail+0x79/0x9c0 [ 1268.994869][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1269.000048][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1269.006379][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1269.012606][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1269.017788][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1269.023692][T20349] __msan_chain_origin+0xbd/0x140 [ 1269.028790][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.034001][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.039008][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1269.043760][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.048519][T20349] ? __schedule+0x176c/0x21c0 [ 1269.053264][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1269.058448][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1269.064331][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1269.069507][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1269.075421][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.080016][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1269.085120][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1269.090301][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1269.095132][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.101708][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.106466][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.112876][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.117970][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.122881][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.127437][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.133848][T20349] RIP: 0023:0xf7f05549 [ 1269.137975][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1269.158679][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1269.167168][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1269.175268][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1269.183300][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.191327][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1269.199354][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.207384][T20349] [ 1269.213347][T20349] Uninit was stored to memory at: [ 1269.218501][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.224251][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.229254][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.234108][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.238705][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.243542][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.249933][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.255128][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.260030][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.264685][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.271077][T20349] [ 1269.273513][T20349] Uninit was stored to memory at: [ 1269.278631][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.283893][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.288970][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.293797][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.298355][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.303180][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.309577][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.314761][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.319693][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.324342][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.330726][T20349] [ 1269.333157][T20349] Uninit was stored to memory at: [ 1269.338248][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.343536][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.348532][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.353372][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.357935][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.362818][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.369211][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.374409][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.379573][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.384232][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.390627][T20349] [ 1269.393072][T20349] Uninit was stored to memory at: [ 1269.398169][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.403435][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.408430][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.413361][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.417923][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.422848][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.429247][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.434439][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.439356][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.444008][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.450396][T20349] [ 1269.452832][T20349] Uninit was stored to memory at: [ 1269.457934][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.463291][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.468298][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.473141][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.477711][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.482563][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.488968][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.494185][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.499105][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.503776][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.510163][T20349] [ 1269.512602][T20349] Uninit was stored to memory at: [ 1269.517708][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.523118][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.528122][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.532968][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.537557][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.542408][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.548802][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.553991][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.558927][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.563587][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.570050][T20349] [ 1269.572489][T20349] Uninit was stored to memory at: [ 1269.577595][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1269.582873][T20349] get_compat_msghdr+0x10c/0x280 [ 1269.587873][T20349] ___sys_recvmsg+0x289/0xb40 [ 1269.592710][T20349] do_recvmmsg+0x7c9/0x1200 [ 1269.597269][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.602109][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1269.608507][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1269.613774][T20349] do_fast_syscall_32+0x33/0x70 [ 1269.618712][T20349] do_SYSENTER_32+0x1b/0x20 [ 1269.623368][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1269.629752][T20349] [ 1269.632177][T20349] Local variable msg_sys created at: [ 1269.637469][T20349] do_recvmmsg+0xc9/0x1200 [ 1269.642038][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1269.704218][T17885] usb 3-1: USB disconnect, device number 14 [ 1269.990851][T20322] not chained 920000 origins [ 1269.995723][T20322] CPU: 1 PID: 20322 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1270.006387][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.016497][T20322] Call Trace: [ 1270.019893][T20322] [ 1270.022839][T20322] dump_stack_lvl+0x200/0x28c [ 1270.027571][T20322] dump_stack+0x29/0x2c [ 1270.031772][T20322] kmsan_internal_chain_origin+0x78/0x120 [ 1270.037554][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1270.043684][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.048949][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.054840][T20322] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1270.060469][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.065666][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.071642][T20322] ? should_fail+0x79/0x9c0 [ 1270.076276][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.081535][T20322] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1270.087838][T20322] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1270.093969][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.099140][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.106858][T20322] __msan_chain_origin+0xbd/0x140 [ 1270.111947][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.117138][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.122257][T20322] ? do_recvmmsg+0x7c9/0x1200 [ 1270.127012][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.131756][T20322] ? __schedule+0x176c/0x21c0 [ 1270.136491][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.141656][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.147527][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.152706][T20322] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.158584][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.163152][T20322] ? filter_irq_stacks+0xb9/0x230 [ 1270.168397][T20322] ? kmsan_get_metadata+0x33/0x220 [ 1270.173583][T20322] ? __sys_recvmmsg+0xb9/0x6f0 [ 1270.178418][T20322] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.184989][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.189827][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.196234][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.201322][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.206316][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.210889][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.217277][T20322] RIP: 0023:0xf7f7e549 [ 1270.221379][T20322] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1270.241036][T20322] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1270.249496][T20322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1270.257529][T20322] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1270.265562][T20322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1270.273571][T20322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1270.281587][T20322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1270.289605][T20322] [ 1270.295430][T20322] Uninit was stored to memory at: [ 1270.300633][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.306257][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.311256][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.316092][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.320651][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.325573][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.332183][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.337272][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.342397][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.347565][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.354059][T20322] [ 1270.356397][T20322] Uninit was stored to memory at: [ 1270.361517][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.366803][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.371906][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.376658][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.381255][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.386107][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.392614][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.397715][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.402736][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.407378][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.413868][T20322] [ 1270.416213][T20322] Uninit was stored to memory at: [ 1270.421308][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.426652][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.431688][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.436636][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.441203][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.446112][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.452610][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.457788][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.462866][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.467447][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.473944][T20322] [ 1270.476282][T20322] Uninit was stored to memory at: [ 1270.481379][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.486721][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.491827][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.496571][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.501157][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.506151][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.512681][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.517776][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.522919][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.527501][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.534184][T20322] [ 1270.536525][T20322] Uninit was stored to memory at: [ 1270.541628][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.546971][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.552219][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.556961][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.561552][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.566489][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.572993][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.578081][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.583183][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.587752][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.594342][T20322] [ 1270.596688][T20322] Uninit was stored to memory at: [ 1270.601967][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.607141][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.612292][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.617029][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.621587][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.626707][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.633391][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.638524][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.643621][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.648181][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.654750][T20322] [ 1270.657097][T20322] Uninit was stored to memory at: [ 1270.662362][T20322] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.667634][T20322] get_compat_msghdr+0x10c/0x280 [ 1270.672802][T20322] ___sys_recvmsg+0x289/0xb40 [ 1270.677651][T20322] do_recvmmsg+0x7c9/0x1200 [ 1270.682460][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.687199][T20322] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.694384][T20322] __do_fast_syscall_32+0x95/0xf0 [ 1270.699476][T20322] do_fast_syscall_32+0x33/0x70 [ 1270.704562][T20322] do_SYSENTER_32+0x1b/0x20 [ 1270.709129][T20322] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1270.715769][T20322] [ 1270.718199][T20322] Local variable msg_sys created at: [ 1270.723695][T20322] do_recvmmsg+0xc9/0x1200 [ 1270.728276][T20322] __sys_recvmmsg+0x520/0x6f0 [ 1270.799454][T20349] not chained 930000 origins [ 1270.804389][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1270.814585][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.824844][T20349] Call Trace: [ 1270.828163][T20349] [ 1270.831123][T20349] dump_stack_lvl+0x200/0x28c [ 1270.835860][T20349] dump_stack+0x29/0x2c [ 1270.840070][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1270.845847][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1270.851991][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.857167][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.863046][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1270.868653][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.873818][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.879682][T20349] ? should_fail+0x79/0x9c0 [ 1270.884239][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.889403][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1270.895707][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1270.901837][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.907264][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.913216][T20349] __msan_chain_origin+0xbd/0x140 [ 1270.918306][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1270.923496][T20349] get_compat_msghdr+0x10c/0x280 [ 1270.928489][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1270.933307][T20349] ___sys_recvmsg+0x289/0xb40 [ 1270.938042][T20349] ? __schedule+0x176c/0x21c0 [ 1270.942774][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.947937][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.953801][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.958968][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1270.964837][T20349] do_recvmmsg+0x7c9/0x1200 [ 1270.969403][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1270.974491][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1270.979676][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1270.984496][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1270.991060][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1270.995805][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.002200][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.007281][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.012174][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.016716][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.023092][T20349] RIP: 0023:0xf7f05549 [ 1271.027180][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1271.047004][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1271.055460][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1271.063475][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1271.071476][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.079480][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1271.087479][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.095842][T20349] [ 1271.101655][T20349] Uninit was stored to memory at: [ 1271.107117][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.112404][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.117388][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.122248][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.126804][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.131529][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.138052][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.143281][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.148263][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.152937][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.159318][T20349] [ 1271.161814][T20349] Uninit was stored to memory at: [ 1271.166904][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.172201][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.177186][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.182036][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.186590][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.191323][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.197847][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.203109][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.208010][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.212710][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.219108][T20349] [ 1271.221456][T20349] Uninit was stored to memory at: [ 1271.226679][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.231953][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.236955][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.241690][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.246441][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.251182][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.257751][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.263026][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.267930][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.272612][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.279034][T20349] [ 1271.281369][T20349] Uninit was stored to memory at: [ 1271.286603][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.291894][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.296911][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.301861][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.306508][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.311235][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.317777][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.322967][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.327872][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.332546][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.338972][T20349] [ 1271.341337][T20349] Uninit was stored to memory at: [ 1271.346649][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.351942][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.356952][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.361681][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.366425][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.371145][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.377791][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.382994][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.387927][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.392702][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.399208][T20349] [ 1271.401569][T20349] Uninit was stored to memory at: [ 1271.406917][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.412224][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.417316][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.422238][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.426905][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.431642][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.438257][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.443485][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.448405][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.453148][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.459533][T20349] [ 1271.462050][T20349] Uninit was stored to memory at: [ 1271.467145][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.472442][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.477460][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.482381][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.486959][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.491892][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.498285][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.503559][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.508463][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.513268][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.519663][T20349] [ 1271.522212][T20349] Local variable msg_sys created at: [ 1271.527511][T20349] do_recvmmsg+0xc9/0x1200 [ 1271.532205][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.636233][T20349] not chained 940000 origins [ 1271.640898][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1271.651118][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.661226][T20349] Call Trace: [ 1271.664534][T20349] [ 1271.667483][T20349] dump_stack_lvl+0x200/0x28c [ 1271.672222][T20349] dump_stack+0x29/0x2c [ 1271.676435][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1271.682218][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1271.688346][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.693517][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1271.699423][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1271.705023][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.710196][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1271.716070][T20349] ? should_fail+0x79/0x9c0 [ 1271.720719][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.725893][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1271.732216][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1271.738343][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.743621][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1271.749487][T20349] __msan_chain_origin+0xbd/0x140 [ 1271.754558][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.759741][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.764735][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1271.769464][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.774200][T20349] ? __schedule+0x176c/0x21c0 [ 1271.779031][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.784211][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1271.790082][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.795262][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1271.801139][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.805714][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1271.810804][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1271.816090][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1271.820920][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.827501][T20349] __sys_recvmmsg+0x520/0x6f0 10:57:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10:57:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x7, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:57:31 executing program 4: io_setup(0x401, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="22d9eb56b4d5", 0x6}]) 10:57:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc01090581"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1271.832257][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.838660][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.843761][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.848660][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.853206][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.859588][T20349] RIP: 0023:0xf7f05549 [ 1271.863687][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1271.883349][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1271.891844][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1271.899854][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1271.907863][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.915865][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1271.923865][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.931888][T20349] [ 1271.937524][T20349] Uninit was stored to memory at: [ 1271.943619][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1271.948801][T20349] get_compat_msghdr+0x10c/0x280 [ 1271.953933][T20349] ___sys_recvmsg+0x289/0xb40 [ 1271.958670][T20349] do_recvmmsg+0x7c9/0x1200 [ 1271.963356][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1271.968097][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1271.974638][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1271.979718][T20349] do_fast_syscall_32+0x33/0x70 [ 1271.984767][T20349] do_SYSENTER_32+0x1b/0x20 [ 1271.989326][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1271.995847][T20349] [ 1271.998194][T20349] Uninit was stored to memory at: [ 1272.003416][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.008580][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.013729][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.018456][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.023126][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.027865][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.037608][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.042810][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.047723][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.052425][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.058817][T20349] [ 1272.061150][T20349] Uninit was stored to memory at: [ 1272.066392][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.071562][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.076696][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.081442][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.086139][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.090883][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.097423][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.102629][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.107556][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.112314][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.118851][T20349] [ 1272.121196][T20349] Uninit was stored to memory at: [ 1272.126542][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.131946][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.136950][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.141881][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.146457][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.151187][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.157877][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.163064][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.168049][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.172792][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.179225][T20349] [ 1272.181561][T20349] Uninit was stored to memory at: [ 1272.186862][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.192181][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.197217][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.202146][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.206740][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.211501][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.215953][T20362] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1272.218109][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.232712][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.237619][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.242388][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.248780][T20349] [ 1272.251124][T20349] Uninit was stored to memory at: [ 1272.256442][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.261608][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.266814][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.271558][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.276359][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.281102][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.287699][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.292893][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.297807][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.302571][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.308976][T20349] [ 1272.311322][T20349] Uninit was stored to memory at: [ 1272.316637][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.321941][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.327056][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.331994][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.336590][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.341331][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.347950][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.353157][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.353224][T12511] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1272.358063][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.358115][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.376791][T20349] [ 1272.379130][T20349] Local variable msg_sys created at: [ 1272.384716][T20349] do_recvmmsg+0xc9/0x1200 10:57:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0xa, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) [ 1272.389199][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.537908][T20349] not chained 950000 origins [ 1272.542799][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1272.553023][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.563130][T20349] Call Trace: [ 1272.566527][T20349] [ 1272.569575][T20349] dump_stack_lvl+0x200/0x28c [ 1272.574333][T20349] dump_stack+0x29/0x2c [ 1272.578543][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1272.584335][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1272.590478][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.595665][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1272.601551][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1272.607160][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.612330][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1272.618193][T20349] ? should_fail+0x79/0x9c0 [ 1272.622740][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.628002][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1272.634303][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1272.640531][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.645693][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1272.651557][T20349] __msan_chain_origin+0xbd/0x140 [ 1272.656630][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.661916][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.666909][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1272.671727][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.676582][T20349] ? __schedule+0x176c/0x21c0 [ 1272.681450][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.686647][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1272.692532][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.697706][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1272.703593][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.708177][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1272.713294][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1272.718479][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1272.723302][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.729872][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.734618][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.741117][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.746211][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.751131][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.755679][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.762302][T20349] RIP: 0023:0xf7f05549 [ 1272.766405][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1272.786907][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1272.795369][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1272.803391][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1272.811847][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1272.819851][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1272.827884][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1272.835909][T20349] [ 1272.842685][T20349] Uninit was stored to memory at: [ 1272.847827][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.853432][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.858456][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.863334][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.867910][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.872788][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.879341][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.884790][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.889707][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.892113][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1272.894453][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.905973][T20349] [ 1272.908316][T20349] Uninit was stored to memory at: [ 1272.913718][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.918940][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.924138][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.928904][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.933690][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.938423][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1272.944959][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1272.950065][T20349] do_fast_syscall_32+0x33/0x70 [ 1272.955178][T20349] do_SYSENTER_32+0x1b/0x20 [ 1272.959732][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1272.966326][T20349] [ 1272.968706][T20349] Uninit was stored to memory at: [ 1272.974009][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1272.979184][T20349] get_compat_msghdr+0x10c/0x280 [ 1272.984388][T20349] ___sys_recvmsg+0x289/0xb40 [ 1272.989146][T20349] do_recvmmsg+0x7c9/0x1200 [ 1272.993923][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1272.998754][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1273.005440][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1273.010525][T20349] do_fast_syscall_32+0x33/0x70 [ 1273.015656][T20349] do_SYSENTER_32+0x1b/0x20 [ 1273.020270][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1273.026873][T20349] [ 1273.029215][T20349] Uninit was stored to memory at: [ 1273.034541][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1273.039716][T20349] get_compat_msghdr+0x10c/0x280 [ 1273.042670][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.045007][T20349] ___sys_recvmsg+0x289/0xb40 [ 1273.055074][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1273.059457][T20349] do_recvmmsg+0x7c9/0x1200 [ 1273.068683][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.073224][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1273.073290][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1273.092610][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1273.097720][T20349] do_fast_syscall_32+0x33/0x70 [ 1273.102840][T20349] do_SYSENTER_32+0x1b/0x20 [ 1273.107398][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1273.114000][T20349] [ 1273.116341][T20349] Uninit was stored to memory at: [ 1273.121440][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1273.126810][T20349] get_compat_msghdr+0x10c/0x280 [ 1273.131953][T20349] ___sys_recvmsg+0x289/0xb40 [ 1273.136706][T20349] do_recvmmsg+0x7c9/0x1200 [ 1273.146979][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1273.152660][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1273.159101][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1273.164461][T20349] do_fast_syscall_32+0x33/0x70 [ 1273.169395][T20349] do_SYSENTER_32+0x1b/0x20 [ 1273.174192][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1273.180583][T20349] [ 1273.183148][T20349] Uninit was stored to memory at: [ 1273.188249][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1273.193646][T20349] get_compat_msghdr+0x10c/0x280 [ 1273.198671][T20349] ___sys_recvmsg+0x289/0xb40 [ 1273.203554][T20349] do_recvmmsg+0x7c9/0x1200 [ 1273.208156][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1273.213030][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1273.219426][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1273.224699][T20349] do_fast_syscall_32+0x33/0x70 [ 1273.229718][T20349] do_SYSENTER_32+0x1b/0x20 [ 1273.234414][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1273.240812][T20349] [ 1273.243282][T20349] Uninit was stored to memory at: [ 1273.248681][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1273.253991][T20349] get_compat_msghdr+0x10c/0x280 [ 1273.259023][T20349] ___sys_recvmsg+0x289/0xb40 [ 1273.263086][T12511] usb 3-1: config 0 descriptor?? [ 1273.263899][T20349] do_recvmmsg+0x7c9/0x1200 [ 1273.273475][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1273.278214][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1273.284827][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1273.289946][T20349] do_fast_syscall_32+0x33/0x70 [ 1273.295187][T20349] do_SYSENTER_32+0x1b/0x20 [ 1273.299747][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1273.306339][T20349] [ 1273.308680][T20349] Local variable msg_sys created at: [ 1273.314219][T20349] do_recvmmsg+0xc9/0x1200 [ 1273.318694][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1273.322962][T12511] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1273.591069][T20359] UDC core: couldn't find an available UDC or it's busy: -16 [ 1273.598900][T20359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1273.957982][T20367] not chained 960000 origins [ 1273.963068][T20367] CPU: 1 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1273.973275][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.983368][T20367] Call Trace: [ 1273.986673][T20367] [ 1273.989625][T20367] dump_stack_lvl+0x200/0x28c [ 1273.994367][T20367] dump_stack+0x29/0x2c [ 1273.998572][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1274.004370][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1274.010595][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.015770][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.021739][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1274.027354][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.032794][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.038768][T20367] ? should_fail+0x79/0x9c0 [ 1274.043438][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.048661][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1274.054987][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1274.061184][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.066378][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.072272][T20367] __msan_chain_origin+0xbd/0x140 [ 1274.077388][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.082619][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.087636][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1274.092389][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.097145][T20367] ? __schedule+0x176c/0x21c0 [ 1274.101912][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.107099][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.112999][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.118274][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.124168][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.128747][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1274.133863][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1274.139056][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1274.143978][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.150558][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.155351][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.161772][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.166870][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.171784][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.176433][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.182917][T20367] RIP: 0023:0xf7f7e549 [ 1274.187069][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1274.206733][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1274.215204][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1274.223240][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1274.231262][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.239309][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1274.247326][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.255358][T20367] [ 1274.262074][T20367] Uninit was stored to memory at: [ 1274.267231][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.272882][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.277995][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.283209][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.287874][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.292747][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.299149][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.301523][T20349] not chained 970000 origins [ 1274.304365][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.304423][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.304472][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.304530][T20367] [ 1274.304537][T20367] Uninit was stored to memory at: [ 1274.304610][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.304665][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.304718][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.304776][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.304831][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.304888][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.304952][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.305003][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.309595][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1274.314532][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.318970][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.325511][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.327716][T20349] Call Trace: [ 1274.327734][T20349] [ 1274.332869][T20367] [ 1274.337879][T20349] dump_stack_lvl+0x200/0x28c [ 1274.342899][T20367] Uninit was stored to memory at: [ 1274.347477][T20349] dump_stack+0x29/0x2c [ 1274.352176][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.356663][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1274.363380][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.368242][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1274.373558][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.383567][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.383637][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.388164][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.398215][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1274.398280][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.404716][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.407912][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.410833][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.413166][T20349] ? should_fail+0x79/0x9c0 [ 1274.413214][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.413274][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1274.417969][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.423018][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1274.423092][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.423151][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.427290][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.432492][T20349] __msan_chain_origin+0xbd/0x140 [ 1274.432555][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.438283][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.443228][T20349] get_compat_msghdr+0x10c/0x280 [ 1274.443295][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1274.449356][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.454027][T20349] ___sys_recvmsg+0x289/0xb40 [ 1274.454099][T20349] ? __schedule+0x176c/0x21c0 [ 1274.459201][T20367] [ 1274.459210][T20367] Uninit was stored to memory at: [ 1274.465018][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.465084][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.465148][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.469834][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.475309][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1274.475381][T20349] do_recvmmsg+0x7c9/0x1200 [ 1274.475446][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1274.480539][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.485223][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1274.485295][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1274.491122][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.497459][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.497537][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1274.497610][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.503252][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.508281][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1274.514684][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.519549][T20349] do_fast_syscall_32+0x33/0x70 [ 1274.525702][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.535565][T20349] do_SYSENTER_32+0x1b/0x20 [ 1274.535636][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.535696][T20349] RIP: 0023:0xf7f05549 [ 1274.535728][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1274.541530][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.546392][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1274.546439][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1274.546471][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1274.546500][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.546528][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1274.551538][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.557251][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.557299][T20349] [ 1274.560126][T20349] Uninit was stored to memory at: [ 1274.561983][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.562043][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.562100][T20367] [ 1274.562108][T20367] Uninit was stored to memory at: [ 1274.562181][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.562236][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.562289][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.562351][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.562405][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.562459][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.562520][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.562569][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.562617][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.562664][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.562719][T20367] [ 1274.562726][T20367] Uninit was stored to memory at: [ 1274.562791][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.562846][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.562897][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.562951][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.563004][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.563058][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.563119][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.568131][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.572836][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.572889][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.572937][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.572994][T20367] [ 1274.573002][T20367] Uninit was stored to memory at: [ 1274.573070][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.579450][T20349] get_compat_msghdr+0x10c/0x280 [ 1274.584211][T20367] get_compat_msghdr+0x10c/0x280 [ 1274.588910][T20349] ___sys_recvmsg+0x289/0xb40 [ 1274.591226][T20367] ___sys_recvmsg+0x289/0xb40 [ 1274.597138][T20349] do_recvmmsg+0x7c9/0x1200 [ 1274.602338][T20367] do_recvmmsg+0x7c9/0x1200 [ 1274.608151][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1274.613340][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.618448][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.624367][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1274.628864][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1274.633960][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1274.638895][T20349] do_fast_syscall_32+0x33/0x70 [ 1274.644106][T20367] do_fast_syscall_32+0x33/0x70 [ 1274.648876][T20349] do_SYSENTER_32+0x1b/0x20 [ 1274.653638][T20367] do_SYSENTER_32+0x1b/0x20 [ 1274.660148][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.664955][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1274.671271][T20349] [ 1274.671280][T20349] Uninit was stored to memory at: [ 1274.675884][T20367] [ 1274.675899][T20367] Local variable msg_sys created at: [ 1274.675915][T20367] do_recvmmsg+0xc9/0x1200 [ 1274.680987][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1274.685722][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1274.690574][T20349] get_compat_msghdr+0x10c/0x280 [ 1274.953031][ T3547] usb 3-1: USB disconnect, device number 15 [ 1274.955505][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.091436][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.096176][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.100910][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.107466][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.113130][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.118669][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.123713][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.130103][T20349] [ 1275.132567][T20349] Uninit was stored to memory at: [ 1275.137770][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.143061][T20349] get_compat_msghdr+0x10c/0x280 [ 1275.148160][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.153039][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.157664][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.162639][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.169046][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.174371][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.179285][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.183980][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.190400][T20349] [ 1275.192872][T20349] Uninit was stored to memory at: [ 1275.197976][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.203422][T20349] get_compat_msghdr+0x10c/0x280 [ 1275.208430][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.213320][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.218134][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.223027][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.229421][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.234657][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.239582][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.244259][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.250672][T20349] [ 1275.253150][T20349] Uninit was stored to memory at: [ 1275.258343][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.263649][T20349] get_compat_msghdr+0x10c/0x280 [ 1275.268642][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.273540][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.278116][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.283047][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.289460][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.294737][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.299637][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.304411][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.310814][T20349] [ 1275.313367][T20349] Uninit was stored to memory at: [ 1275.318480][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.323878][T20349] get_compat_msghdr+0x10c/0x280 [ 1275.328875][T20367] not chained 980000 origins [ 1275.328871][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.333853][T20367] CPU: 1 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1275.338336][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.348471][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.348500][T20367] Call Trace: [ 1275.348517][T20367] [ 1275.348532][T20367] dump_stack_lvl+0x200/0x28c [ 1275.348594][T20367] dump_stack+0x29/0x2c [ 1275.353178][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.363144][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1275.363215][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1275.366524][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.369709][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.374486][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.378689][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1275.383538][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.389090][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1275.395283][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.401472][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.406677][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.411575][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1275.417477][T20349] [ 1275.422219][T20367] ? should_fail+0x79/0x9c0 [ 1275.422268][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.422331][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1275.427853][T20349] Uninit was stored to memory at: [ 1275.427928][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.432427][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1275.432496][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.437626][T20349] get_compat_msghdr+0x10c/0x280 [ 1275.443947][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1275.444016][T20367] __msan_chain_origin+0xbd/0x140 [ 1275.444078][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.449890][T20349] ___sys_recvmsg+0x289/0xb40 [ 1275.452227][T20367] get_compat_msghdr+0x10c/0x280 [ 1275.452293][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1275.456805][T20349] do_recvmmsg+0x7c9/0x1200 [ 1275.461916][T20367] ___sys_recvmsg+0x289/0xb40 [ 1275.461990][T20367] ? __schedule+0x176c/0x21c0 [ 1275.468237][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.473344][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.473408][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1275.478555][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.484607][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.484670][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1275.484739][T20367] do_recvmmsg+0x7c9/0x1200 [ 1275.489812][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1275.494751][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1275.494834][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1275.500672][T20349] do_fast_syscall_32+0x33/0x70 [ 1275.505689][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1275.505750][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.510970][T20349] do_SYSENTER_32+0x1b/0x20 [ 1275.515746][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1275.515829][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.520864][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.525538][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1275.525599][T20367] do_fast_syscall_32+0x33/0x70 [ 1275.525654][T20367] do_SYSENTER_32+0x1b/0x20 [ 1275.530123][T20349] [ 1275.530133][T20349] Local variable msg_sys created at: [ 1275.534795][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.534864][T20367] RIP: 0023:0xf7f7e549 [ 1275.534896][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1275.539580][T20349] do_recvmmsg+0xc9/0x1200 [ 1275.544238][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1275.544285][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1275.544318][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1275.544347][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1275.549450][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1275.555252][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1275.555282][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1275.555326][T20367] [ 1275.557911][T20367] Uninit was stored to memory at: [ 1275.750957][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.756252][T20367] get_compat_msghdr+0x10c/0x280 [ 1275.761333][T20367] ___sys_recvmsg+0x289/0xb40 [ 1275.766195][T20367] do_recvmmsg+0x7c9/0x1200 [ 1275.770773][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1275.775716][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.782250][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1275.787358][T20367] do_fast_syscall_32+0x33/0x70 [ 1275.792363][T20367] do_SYSENTER_32+0x1b/0x20 [ 1275.796949][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.803533][T20367] [ 1275.805867][T20367] Uninit was stored to memory at: [ 1275.811049][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.816337][T20367] get_compat_msghdr+0x10c/0x280 [ 1275.821333][T20367] ___sys_recvmsg+0x289/0xb40 [ 1275.826187][T20367] do_recvmmsg+0x7c9/0x1200 [ 1275.830818][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1275.835665][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.842237][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1275.847326][T20367] do_fast_syscall_32+0x33/0x70 [ 1275.852325][T20367] do_SYSENTER_32+0x1b/0x20 [ 1275.856893][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.863398][T20367] [ 1275.865780][T20367] Uninit was stored to memory at: [ 1275.871017][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.876321][T20367] get_compat_msghdr+0x10c/0x280 [ 1275.881314][T20367] ___sys_recvmsg+0x289/0xb40 [ 1275.886191][T20367] do_recvmmsg+0x7c9/0x1200 [ 1275.890954][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1275.895798][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.902307][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1275.907419][T20367] do_fast_syscall_32+0x33/0x70 [ 1275.912595][T20367] do_SYSENTER_32+0x1b/0x20 [ 1275.917153][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.923673][T20367] [ 1275.926113][T20367] Uninit was stored to memory at: [ 1275.931206][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.936497][T20367] get_compat_msghdr+0x10c/0x280 [ 1275.941953][T20367] ___sys_recvmsg+0x289/0xb40 [ 1275.946694][T20367] do_recvmmsg+0x7c9/0x1200 [ 1275.951254][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1275.956093][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1275.962588][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1275.967935][T20367] do_fast_syscall_32+0x33/0x70 [ 1275.972938][T20367] do_SYSENTER_32+0x1b/0x20 [ 1275.977489][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1275.983997][T20367] [ 1275.986334][T20367] Uninit was stored to memory at: [ 1275.991427][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1275.996701][T20367] get_compat_msghdr+0x10c/0x280 [ 1276.001836][T20367] ___sys_recvmsg+0x289/0xb40 [ 1276.006573][T20367] do_recvmmsg+0x7c9/0x1200 [ 1276.011150][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1276.016372][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.022879][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1276.027956][T20367] do_fast_syscall_32+0x33/0x70 [ 1276.033073][T20367] do_SYSENTER_32+0x1b/0x20 [ 1276.037628][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.044399][T20367] [ 1276.046739][T20367] Uninit was stored to memory at: [ 1276.051934][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.057277][T20367] get_compat_msghdr+0x10c/0x280 [ 1276.062396][T20367] ___sys_recvmsg+0x289/0xb40 [ 1276.067237][T20367] do_recvmmsg+0x7c9/0x1200 [ 1276.071896][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1276.076738][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.083245][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1276.088324][T20367] do_fast_syscall_32+0x33/0x70 [ 1276.093344][T20367] do_SYSENTER_32+0x1b/0x20 [ 1276.097903][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.104530][T20367] [ 1276.106903][T20367] Uninit was stored to memory at: [ 1276.112142][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.117347][T20367] get_compat_msghdr+0x10c/0x280 [ 1276.122622][T20367] ___sys_recvmsg+0x289/0xb40 [ 1276.127364][T20367] do_recvmmsg+0x7c9/0x1200 [ 1276.132087][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1276.136952][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.143461][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1276.148701][T20367] do_fast_syscall_32+0x33/0x70 [ 1276.153784][T20367] do_SYSENTER_32+0x1b/0x20 [ 1276.158345][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.164914][T20367] [ 1276.167259][T20367] Local variable msg_sys created at: [ 1276.172729][T20367] do_recvmmsg+0xc9/0x1200 [ 1276.177209][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1276.229010][T20349] not chained 990000 origins [ 1276.234005][T20349] CPU: 1 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1276.244217][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.254417][T20349] Call Trace: [ 1276.257752][T20349] [ 1276.260696][T20349] dump_stack_lvl+0x200/0x28c [ 1276.265433][T20349] dump_stack+0x29/0x2c [ 1276.269634][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1276.275415][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1276.281548][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.286725][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.292603][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1276.298210][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.303401][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.309305][T20349] ? should_fail+0x79/0x9c0 [ 1276.313869][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.319968][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1276.329978][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1276.337882][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.344674][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.350745][T20349] __msan_chain_origin+0xbd/0x140 [ 1276.356005][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.361221][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.366219][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1276.370958][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.375795][T20349] ? __schedule+0x176c/0x21c0 [ 1276.380537][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.385845][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.391731][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.396902][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.402782][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.407351][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1276.412459][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1276.417674][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1276.422515][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.429095][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.434000][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.440420][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.445513][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.450523][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.455088][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.461492][T20349] RIP: 0023:0xf7f05549 [ 1276.465611][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1276.485980][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1276.494448][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1276.502468][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1276.510481][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1276.518680][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1276.526696][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.534730][T20349] [ 1276.540619][T20349] Uninit was stored to memory at: [ 1276.546132][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.551328][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.556457][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.561204][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.565874][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.570608][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.577116][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.582427][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.587344][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.592061][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.598466][T20349] [ 1276.600818][T20349] Uninit was stored to memory at: [ 1276.606133][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.611368][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.616492][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.621236][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.626012][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.630780][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.637459][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.642760][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.647721][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.652465][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.658870][T20349] [ 1276.661216][T20349] Uninit was stored to memory at: [ 1276.666507][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.671689][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.676893][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.681637][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.686394][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.691135][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.697719][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.703058][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.708071][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.712807][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.719308][T20349] [ 1276.721646][T20349] Uninit was stored to memory at: [ 1276.726929][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.729379][T20367] not chained 1000000 origins [ 1276.732301][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.732364][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.732422][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.732478][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.737260][T20367] CPU: 0 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1276.742261][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.746783][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.751270][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.755932][T20367] Call Trace: [ 1276.755950][T20367] [ 1276.755966][T20367] dump_stack_lvl+0x200/0x28c [ 1276.756025][T20367] dump_stack+0x29/0x2c [ 1276.766344][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.772568][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1276.772636][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1276.782812][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.787717][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.790988][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.793913][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.793983][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1276.794045][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.798697][T20349] [ 1276.798708][T20349] Uninit was stored to memory at: [ 1276.802840][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.802912][T20367] ? should_fail+0x79/0x9c0 [ 1276.807842][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.813490][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.813555][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1276.819642][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.824147][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1276.824217][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.829332][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.835646][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.835715][T20367] __msan_chain_origin+0xbd/0x140 [ 1276.841528][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.847058][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.847137][T20367] get_compat_msghdr+0x10c/0x280 [ 1276.847201][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1276.852350][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.854590][T20367] ___sys_recvmsg+0x289/0xb40 [ 1276.859592][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.865418][T20367] ? __schedule+0x176c/0x21c0 [ 1276.865482][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.869999][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.875183][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.875251][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.880364][T20349] do_fast_syscall_32+0x33/0x70 [ 1276.886590][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1276.886661][T20367] do_recvmmsg+0x7c9/0x1200 [ 1276.891603][T20349] do_SYSENTER_32+0x1b/0x20 [ 1276.897671][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1276.897752][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1276.902967][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.907553][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1276.913431][T20349] [ 1276.918354][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.922940][T20349] Uninit was stored to memory at: [ 1276.927952][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1276.933112][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1276.937635][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.942405][T20349] get_compat_msghdr+0x10c/0x280 [ 1276.946954][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1276.953348][T20349] ___sys_recvmsg+0x289/0xb40 [ 1276.957925][T20367] do_fast_syscall_32+0x33/0x70 [ 1276.963102][T20349] do_recvmmsg+0x7c9/0x1200 [ 1276.968038][T20367] do_SYSENTER_32+0x1b/0x20 [ 1276.973926][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1276.978951][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1276.983871][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1276.989585][T20367] RIP: 0023:0xf7f7e549 [ 1276.994193][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1276.998559][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1277.003654][T20349] do_fast_syscall_32+0x33/0x70 [ 1277.008662][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1277.015061][T20349] do_SYSENTER_32+0x1b/0x20 [ 1277.019756][T20367] ORIG_RAX: 0000000000000151 [ 1277.022160][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.028573][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1277.033696][T20349] [ 1277.038363][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1277.043575][T20349] Uninit was stored to memory at: [ 1277.049763][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1277.054839][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.059694][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1277.064581][T20349] get_compat_msghdr+0x10c/0x280 [ 1277.069301][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.073894][T20349] ___sys_recvmsg+0x289/0xb40 [ 1277.078384][T20367] [ 1277.083120][T20349] do_recvmmsg+0x7c9/0x1200 [ 1277.092701][T20367] Uninit was stored to memory at: [ 1277.095776][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1277.099883][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.105024][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.105090][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1277.105142][T20349] do_fast_syscall_32+0x33/0x70 [ 1277.105190][T20349] do_SYSENTER_32+0x1b/0x20 [ 1277.105244][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.105318][T20349] [ 1277.105327][T20349] Local variable msg_sys created at: [ 1277.105343][T20349] do_recvmmsg+0xc9/0x1200 [ 1277.125097][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.129941][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1277.136110][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.291349][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.296053][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.300802][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.307422][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.312618][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.317515][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.322201][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.328592][T20367] [ 1277.330929][T20367] Uninit was stored to memory at: [ 1277.336185][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.341352][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.346914][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.351652][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.356317][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.361059][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.367681][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.372860][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.377764][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.382525][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.388907][T20367] [ 1277.391260][T20367] Uninit was stored to memory at: [ 1277.396525][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.401965][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.406964][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.411871][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.416436][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.421259][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.427787][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.433015][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.437922][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.442623][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.449013][T20367] [ 1277.451347][T20367] Uninit was stored to memory at: [ 1277.456607][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.461875][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.466861][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.471828][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.476390][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.481162][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.487705][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.492891][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.497983][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.502670][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.509060][T20367] [ 1277.511397][T20367] Uninit was stored to memory at: [ 1277.516640][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.522015][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.527037][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.531910][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.536477][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.541303][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.547983][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.553200][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.558106][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.562882][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.569267][T20367] [ 1277.571606][T20367] Uninit was stored to memory at: [ 1277.576920][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.582219][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.587218][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.592142][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.596715][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.601462][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.608164][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.613359][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.618264][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.623007][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.629392][T20367] [ 1277.631915][T20367] Uninit was stored to memory at: [ 1277.637011][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1277.642469][T20367] get_compat_msghdr+0x10c/0x280 [ 1277.647458][T20367] ___sys_recvmsg+0x289/0xb40 [ 1277.652396][T20367] do_recvmmsg+0x7c9/0x1200 [ 1277.656951][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1277.661675][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1277.668336][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1277.673575][T20367] do_fast_syscall_32+0x33/0x70 [ 1277.678688][T20367] do_SYSENTER_32+0x1b/0x20 [ 1277.683450][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1277.689965][T20367] [ 1277.692506][T20367] Local variable msg_sys created at: [ 1277.697801][T20367] do_recvmmsg+0xc9/0x1200 [ 1277.702407][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1278.002264][T20349] not chained 1010000 origins [ 1278.006998][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1278.017195][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.027299][T20349] Call Trace: [ 1278.030610][T20349] [ 1278.033555][T20349] dump_stack_lvl+0x200/0x28c [ 1278.038399][T20349] dump_stack+0x29/0x2c [ 1278.042638][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1278.048435][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1278.054584][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.059861][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.066195][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1278.071993][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.077167][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.083157][T20349] ? should_fail+0x79/0x9c0 [ 1278.087739][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.092930][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1278.099250][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1278.105394][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.110561][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.116434][T20349] __msan_chain_origin+0xbd/0x140 [ 1278.121526][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.126730][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.131723][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1278.136472][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.141209][T20349] ? raw_spin_rq_unlock_irq+0x3b/0xd0 [ 1278.146633][T20349] ? __schedule+0x1980/0x21c0 [ 1278.151373][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.156566][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.162462][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.167630][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.173497][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.178062][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1278.183255][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.188452][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1278.193284][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.199946][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.204723][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.211125][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.216210][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.221130][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.225713][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.232322][T20349] RIP: 0023:0xf7f05549 [ 1278.236531][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1278.256203][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1278.264791][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1278.272812][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1278.280849][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.288869][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1278.296981][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.305008][T20349] [ 1278.310873][T20349] Uninit was stored to memory at: [ 1278.316410][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.321667][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.326881][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.331634][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.336324][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.341145][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.347673][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.352855][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.357759][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.362429][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.368809][T20349] [ 1278.371142][T20349] Uninit was stored to memory at: [ 1278.376368][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.381546][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.390837][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.395695][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.400270][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.405131][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.411524][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.416754][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.421657][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.426494][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.433016][T20349] [ 1278.435360][T20349] Uninit was stored to memory at: [ 1278.440461][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.445836][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.450830][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.455801][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.460460][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.465445][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.472604][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.477779][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.482971][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.487525][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.494086][T20349] [ 1278.496438][T20349] Uninit was stored to memory at: [ 1278.501532][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.506985][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.512105][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.516852][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.521404][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.526346][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.532871][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.538906][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.544006][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.548559][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.555119][T20349] [ 1278.557468][T20349] Uninit was stored to memory at: [ 1278.562782][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.567954][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.573149][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.578066][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.582760][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.587520][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.594134][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.599219][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.604600][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.609269][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.615889][T20349] [ 1278.618253][T20349] Uninit was stored to memory at: [ 1278.623501][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.628669][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.633953][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.638734][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.643577][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.648315][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.654957][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.660046][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.665249][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.669800][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.676402][T20349] [ 1278.678749][T20349] Uninit was stored to memory at: [ 1278.684039][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1278.689214][T20349] get_compat_msghdr+0x10c/0x280 [ 1278.694432][T20349] ___sys_recvmsg+0x289/0xb40 [ 1278.699363][T20349] do_recvmmsg+0x7c9/0x1200 [ 1278.704261][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.709088][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1278.715709][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1278.720820][T20349] do_fast_syscall_32+0x33/0x70 [ 1278.725917][T20349] do_SYSENTER_32+0x1b/0x20 [ 1278.730471][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1278.737068][T20349] [ 1278.739411][T20349] Local variable msg_sys created at: [ 1278.744922][T20349] do_recvmmsg+0xc9/0x1200 [ 1278.749406][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1278.935433][T20349] not chained 1020000 origins [ 1278.940162][T20349] CPU: 0 PID: 20349 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1278.950372][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.960454][T20349] Call Trace: [ 1278.963755][T20349] [ 1278.966699][T20349] dump_stack_lvl+0x200/0x28c [ 1278.971441][T20349] dump_stack+0x29/0x2c [ 1278.975687][T20349] kmsan_internal_chain_origin+0x78/0x120 [ 1278.981467][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1278.987617][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1278.992815][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1278.998690][T20349] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1279.004410][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.009584][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.015462][T20349] ? should_fail+0x79/0x9c0 [ 1279.020003][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.025168][T20349] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1279.031468][T20349] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1279.037593][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.042766][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.048728][T20349] __msan_chain_origin+0xbd/0x140 [ 1279.053807][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.059426][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.064431][T20349] ? do_recvmmsg+0x7c9/0x1200 [ 1279.069167][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.073911][T20349] ? __schedule+0x176c/0x21c0 [ 1279.078646][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.083815][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.089702][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.094877][T20349] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.100752][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.105314][T20349] ? filter_irq_stacks+0xb9/0x230 [ 1279.111117][T20349] ? kmsan_get_metadata+0x33/0x220 [ 1279.116324][T20349] ? __sys_recvmmsg+0xb9/0x6f0 [ 1279.121162][T20349] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.127730][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.132474][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.138961][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.144042][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.148949][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.153503][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.159922][T20349] RIP: 0023:0xf7f05549 [ 1279.164031][T20349] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1279.180362][T20367] not chained 1030000 origins [ 1279.183716][T20349] RSP: 002b:00000000f7edf5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1279.183768][T20349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1279.183802][T20349] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1279.183831][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.183859][T20349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1279.183887][T20349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.183932][T20349] [ 1279.239892][T20367] CPU: 1 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1279.242682][T20349] Uninit was stored to memory at: [ 1279.250112][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.255684][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.265181][T20367] Call Trace: [ 1279.265200][T20367] [ 1279.265217][T20367] dump_stack_lvl+0x200/0x28c [ 1279.265279][T20367] dump_stack+0x29/0x2c [ 1279.265326][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1279.270429][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.273695][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1279.273762][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.273823][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.276728][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.284116][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1279.284195][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.284257][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.288522][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.294241][T20367] ? should_fail+0x79/0x9c0 [ 1279.294292][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.294354][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1279.299288][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.305344][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1279.305414][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.305475][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.310554][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.316367][T20367] __msan_chain_origin+0xbd/0x140 [ 1279.316433][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.316510][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.321140][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.326867][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1279.326935][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.327014][T20367] ? do_recvmmsg+0x87d/0x1200 [ 1279.332189][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.337897][T20367] ? kmsan_get_metadata+0x100/0x220 [ 1279.342504][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.346877][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.352087][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.358391][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1279.363165][T20349] [ 1279.369132][T20367] do_recvmmsg+0x7c9/0x1200 [ 1279.374335][T20349] Uninit was stored to memory at: [ 1279.380038][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1279.386553][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.391411][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1279.396637][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.401449][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1279.406570][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.411143][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.415927][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.420480][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1279.425456][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.430541][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.435124][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.440131][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1279.446702][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.452376][T20367] do_fast_syscall_32+0x33/0x70 [ 1279.452438][T20367] do_SYSENTER_32+0x1b/0x20 [ 1279.452490][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.454835][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.459389][T20367] RIP: 0023:0xf7f7e549 [ 1279.464664][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.469569][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1279.475141][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.480281][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 [ 1279.485375][T20349] [ 1279.489979][T20367] ORIG_RAX: 0000000000000151 [ 1279.489998][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1279.494829][T20349] Uninit was stored to memory at: [ 1279.501219][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1279.506050][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.510623][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.515519][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.521716][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1279.521749][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.521795][T20367] [ 1279.524743][T20367] Uninit was stored to memory at: [ 1279.528152][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.533590][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.538295][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.543241][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.547746][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.554145][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.559006][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.563150][T20367] do_recvmmsg+0x7c9/0x1200 [ 1279.567667][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.587700][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1279.594135][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.600200][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.602628][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.607297][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1279.615376][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.620473][T20367] do_fast_syscall_32+0x33/0x70 [ 1279.628574][T20349] [ 1279.634037][T20367] do_SYSENTER_32+0x1b/0x20 [ 1279.642170][T20349] Uninit was stored to memory at: [ 1279.642257][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.647117][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.655370][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.663593][T20367] [ 1279.663603][T20367] Uninit was stored to memory at: [ 1279.663677][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.666638][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.671827][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.676607][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.681802][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.686678][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.691629][T20367] do_recvmmsg+0x7c9/0x1200 [ 1279.696409][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.701183][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1279.707775][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.712437][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.717460][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.722206][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1279.727057][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.733454][T20367] do_fast_syscall_32+0x33/0x70 [ 1279.737994][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.743085][T20367] do_SYSENTER_32+0x1b/0x20 [ 1279.749417][T20349] [ 1279.749426][T20349] Uninit was stored to memory at: [ 1279.749502][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.754342][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.756681][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.761170][T20367] [ 1279.761180][T20367] Uninit was stored to memory at: [ 1279.766312][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.771547][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.777919][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.785703][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.788046][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.794011][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.799321][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.804081][T20367] do_recvmmsg+0x7c9/0x1200 [ 1279.809021][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.813614][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1279.818471][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.823310][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.827820][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.834314][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1279.839015][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.844132][T20367] do_fast_syscall_32+0x33/0x70 [ 1279.850465][T20349] [ 1279.850475][T20349] Uninit was stored to memory at: [ 1279.855392][T20367] do_SYSENTER_32+0x1b/0x20 [ 1279.860570][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.865144][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.870023][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.876521][T20367] [ 1279.876531][T20367] Uninit was stored to memory at: [ 1279.876603][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.881026][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.883428][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.888466][T20349] do_recvmmsg+0x7c9/0x1200 [ 1279.893668][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.900041][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1279.905064][T20367] do_recvmmsg+0x7c9/0x1200 [ 1279.907395][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.912486][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1279.917167][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1279.922460][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1279.926982][T20349] do_fast_syscall_32+0x33/0x70 [ 1279.932001][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1279.936910][T20349] do_SYSENTER_32+0x1b/0x20 [ 1279.941594][T20367] do_fast_syscall_32+0x33/0x70 [ 1279.948030][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.952581][T20367] do_SYSENTER_32+0x1b/0x20 [ 1279.957587][T20349] [ 1279.957596][T20349] Uninit was stored to memory at: [ 1279.962349][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1279.967274][T20349] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.973620][T20367] [ 1279.973629][T20367] Uninit was stored to memory at: [ 1279.973699][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1279.978146][T20349] get_compat_msghdr+0x10c/0x280 [ 1279.983239][T20367] get_compat_msghdr+0x10c/0x280 [ 1279.989573][T20349] ___sys_recvmsg+0x289/0xb40 [ 1279.994497][T20367] ___sys_recvmsg+0x289/0xb40 [ 1279.997026][T20349] do_recvmmsg+0x7c9/0x1200 [ 1280.002142][T20367] do_recvmmsg+0x7c9/0x1200 [ 1280.006757][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1280.011942][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1280.018293][T20349] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.023308][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.023376][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1280.025702][T20349] __do_fast_syscall_32+0x95/0xf0 [ 1280.030710][T20367] do_fast_syscall_32+0x33/0x70 [ 1280.035937][T20349] do_fast_syscall_32+0x33/0x70 [ 1280.040613][T20367] do_SYSENTER_32+0x1b/0x20 [ 1280.045649][T20349] do_SYSENTER_32+0x1b/0x20 [ 1280.050121][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1280.054897][T20349] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1280.059625][T20367] [ 1280.059635][T20367] Uninit was stored to memory at: [ 1280.064218][T20349] [ 1280.070582][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1280.075295][T20349] Local variable msg_sys created at: [ 1280.080286][T20367] get_compat_msghdr+0x10c/0x280 [ 1280.086910][T20349] do_recvmmsg+0xc9/0x1200 [ 1280.091849][T20367] ___sys_recvmsg+0x289/0xb40 [ 1280.096873][T20349] __sys_recvmmsg+0x520/0x6f0 [ 1280.101378][T20367] do_recvmmsg+0x7c9/0x1200 [ 1280.286777][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1280.291514][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.298079][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1280.303269][T20367] do_fast_syscall_32+0x33/0x70 [ 1280.308178][T20367] do_SYSENTER_32+0x1b/0x20 [ 1280.312907][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1280.319310][T20367] [ 1280.321669][T20367] Uninit was stored to memory at: [ 1280.327087][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1280.332524][T20367] get_compat_msghdr+0x10c/0x280 [ 1280.337529][T20367] ___sys_recvmsg+0x289/0xb40 [ 1280.342419][T20367] do_recvmmsg+0x7c9/0x1200 [ 1280.346975][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1280.351812][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.358216][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1280.363456][T20367] do_fast_syscall_32+0x33/0x70 [ 1280.368354][T20367] do_SYSENTER_32+0x1b/0x20 [ 1280.372997][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1280.379378][T20367] [ 1280.381902][T20367] Local variable msg_sys created at: [ 1280.387218][T20367] do_recvmmsg+0xc9/0x1200 [ 1280.391894][T20367] __sys_recvmmsg+0x520/0x6f0 10:57:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:40 executing program 3: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) 10:57:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:40 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x26}, 0x10) 10:57:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x8c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0xffffff76) creat(0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8) [ 1280.662772][T20367] not chained 1040000 origins [ 1280.667662][T20367] CPU: 1 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1280.677988][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.684706][T20376] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1280.688081][T20367] Call Trace: [ 1280.688102][T20367] [ 1280.688119][T20367] dump_stack_lvl+0x200/0x28c [ 1280.708413][T20367] dump_stack+0x29/0x2c [ 1280.712621][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1280.718412][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1280.724561][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.729729][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1280.735608][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1280.741329][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.746512][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1280.752394][T20367] ? should_fail+0x79/0x9c0 [ 1280.756939][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.762093][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1280.768463][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1280.774578][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.779731][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1280.785578][T20367] __msan_chain_origin+0xbd/0x140 [ 1280.790803][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1280.796002][T20367] get_compat_msghdr+0x10c/0x280 [ 1280.800990][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1280.805710][T20367] ___sys_recvmsg+0x289/0xb40 [ 1280.810484][T20367] ? __schedule+0x176c/0x21c0 [ 1280.815195][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.820359][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1280.826376][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.831553][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1280.837398][T20367] do_recvmmsg+0x7c9/0x1200 [ 1280.841944][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1280.847030][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1280.852265][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1280.857055][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.863683][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1280.868398][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1280.874766][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1280.879825][T20367] do_fast_syscall_32+0x33/0x70 [ 1280.884722][T20367] do_SYSENTER_32+0x1b/0x20 [ 1280.889275][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1280.895667][T20367] RIP: 0023:0xf7f7e549 [ 1280.899740][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1280.919377][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1280.927816][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1280.935812][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1280.943924][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.951996][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1280.959975][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.968217][T20367] [ 1280.974420][T20367] Uninit was stored to memory at: [ 1280.979544][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1280.985118][T20367] get_compat_msghdr+0x10c/0x280 [ 1280.990119][T20367] ___sys_recvmsg+0x289/0xb40 [ 1280.995007][T20367] do_recvmmsg+0x7c9/0x1200 [ 1280.999540][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.004427][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.010820][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.015969][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.020852][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.025442][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.031905][T20367] [ 1281.034238][T20367] Uninit was stored to memory at: [ 1281.039314][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.045135][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.050168][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.054982][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.059551][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.064385][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.070775][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.075905][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.080783][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.085383][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.091848][T20367] [ 1281.094177][T20367] Uninit was stored to memory at: [ 1281.099264][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.104475][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.109443][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.114885][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.119447][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.124240][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.130890][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.136044][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.140949][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.145762][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.152294][T20367] [ 1281.154614][T20367] Uninit was stored to memory at: [ 1281.159679][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.164900][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.169896][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.174669][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.179201][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.183965][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.190329][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.195458][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.200347][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.205040][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.211428][T20367] [ 1281.213853][T20367] Uninit was stored to memory at: [ 1281.218930][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.224162][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.229231][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.234013][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.238656][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.243468][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.249836][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.254967][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.259841][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.264445][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.270829][T20367] [ 1281.273240][T20367] Uninit was stored to memory at: [ 1281.278323][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.283670][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.288895][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.293717][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.298254][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.303026][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.309392][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.314572][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.319554][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.324196][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.330562][T20367] [ 1281.332971][T20367] Uninit was stored to memory at: [ 1281.338047][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1281.343268][T20367] get_compat_msghdr+0x10c/0x280 [ 1281.348240][T20367] ___sys_recvmsg+0x289/0xb40 [ 1281.353063][T20367] do_recvmmsg+0x7c9/0x1200 [ 1281.357594][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1281.362448][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1281.368817][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1281.373965][T20367] do_fast_syscall_32+0x33/0x70 [ 1281.378850][T20367] do_SYSENTER_32+0x1b/0x20 [ 1281.383522][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1281.389883][T20367] [ 1281.392268][T20367] Local variable msg_sys created at: [ 1281.397687][T20367] do_recvmmsg+0xc9/0x1200 [ 1281.402263][T20367] __sys_recvmmsg+0x520/0x6f0 10:57:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0xffffff76) creat(0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8) [ 1281.713167][ T3547] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1281.973281][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1282.092875][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.104368][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.114574][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1282.123920][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.244312][ T3547] usb 3-1: config 0 descriptor?? [ 1282.540788][T20367] not chained 1050000 origins [ 1282.545842][T20367] CPU: 1 PID: 20367 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1282.556050][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.566580][T20367] Call Trace: [ 1282.569918][T20367] [ 1282.572875][T20367] dump_stack_lvl+0x200/0x28c [ 1282.577617][T20367] dump_stack+0x29/0x2c [ 1282.581827][T20367] kmsan_internal_chain_origin+0x78/0x120 [ 1282.587610][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1282.593738][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.598917][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1282.604794][T20367] ? __unix_dgram_recvmsg+0x19b9/0x1b80 [ 1282.610408][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.615585][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1282.621461][T20367] ? should_fail+0x79/0x9c0 [ 1282.626025][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.631204][T20367] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1282.637513][T20367] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1282.643653][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.648914][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1282.654782][T20367] __msan_chain_origin+0xbd/0x140 [ 1282.659878][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1282.665162][T20367] get_compat_msghdr+0x10c/0x280 [ 1282.670171][T20367] ? do_recvmmsg+0x7c9/0x1200 [ 1282.674914][T20367] ___sys_recvmsg+0x289/0xb40 [ 1282.679692][T20367] ? __schedule+0x176c/0x21c0 [ 1282.684439][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.689612][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1282.695492][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.700697][T20367] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1282.703942][T20378] UDC core: couldn't find an available UDC or it's busy: -16 [ 1282.706569][T20367] do_recvmmsg+0x7c9/0x1200 [ 1282.714285][T20378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1282.718476][T20367] ? filter_irq_stacks+0xb9/0x230 [ 1282.731116][T20367] ? kmsan_get_metadata+0x33/0x220 [ 1282.736410][T20367] ? __sys_recvmmsg+0xb9/0x6f0 [ 1282.741239][T20367] ? __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1282.747820][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1282.752752][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1282.759184][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1282.764291][T20367] do_fast_syscall_32+0x33/0x70 [ 1282.769200][T20367] do_SYSENTER_32+0x1b/0x20 [ 1282.773757][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1282.780148][T20367] RIP: 0023:0xf7f7e549 [ 1282.784272][T20367] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1282.803946][T20367] RSP: 002b:00000000f7f585cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1282.812415][T20367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1282.820451][T20367] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1282.828557][T20367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.836572][T20367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1282.844676][T20367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1282.852706][T20367] [ 1282.858776][T20367] Uninit was stored to memory at: [ 1282.864326][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1282.869504][T20367] get_compat_msghdr+0x10c/0x280 [ 1282.874878][T20367] ___sys_recvmsg+0x289/0xb40 [ 1282.879621][T20367] do_recvmmsg+0x7c9/0x1200 [ 1282.884309][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1282.889070][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1282.895632][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1282.900717][T20367] do_fast_syscall_32+0x33/0x70 [ 1282.905892][T20367] do_SYSENTER_32+0x1b/0x20 [ 1282.910580][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1282.917149][T20367] [ 1282.919491][T20367] Uninit was stored to memory at: [ 1282.924779][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1282.929971][T20367] get_compat_msghdr+0x10c/0x280 [ 1282.935171][T20367] ___sys_recvmsg+0x289/0xb40 [ 1282.939915][T20367] do_recvmmsg+0x7c9/0x1200 [ 1282.944640][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1282.949379][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1282.955950][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1282.961054][T20367] do_fast_syscall_32+0x33/0x70 [ 1282.966219][T20367] do_SYSENTER_32+0x1b/0x20 [ 1282.970782][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1282.977378][T20367] [ 1282.979724][T20367] Uninit was stored to memory at: [ 1282.984924][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1282.990092][T20367] get_compat_msghdr+0x10c/0x280 [ 1282.995274][T20367] ___sys_recvmsg+0x289/0xb40 [ 1283.000145][T20367] do_recvmmsg+0x7c9/0x1200 [ 1283.005007][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.009930][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1283.016651][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1283.021843][T20367] do_fast_syscall_32+0x33/0x70 [ 1283.026792][T20367] do_SYSENTER_32+0x1b/0x20 [ 1283.031378][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1283.037979][T20367] [ 1283.040341][T20367] Uninit was stored to memory at: [ 1283.045709][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1283.050880][T20367] get_compat_msghdr+0x10c/0x280 [ 1283.056495][T20367] ___sys_recvmsg+0x289/0xb40 [ 1283.061268][T20367] do_recvmmsg+0x7c9/0x1200 [ 1283.066110][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.070855][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1283.077449][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1283.082720][T20367] do_fast_syscall_32+0x33/0x70 [ 1283.087652][T20367] do_SYSENTER_32+0x1b/0x20 [ 1283.092372][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1283.098781][T20367] [ 1283.101123][T20367] Uninit was stored to memory at: [ 1283.106408][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1283.111576][T20367] get_compat_msghdr+0x10c/0x280 [ 1283.116765][T20367] ___sys_recvmsg+0x289/0xb40 [ 1283.121508][T20367] do_recvmmsg+0x7c9/0x1200 [ 1283.126259][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.131023][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1283.137715][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1283.142917][T20367] do_fast_syscall_32+0x33/0x70 [ 1283.147922][T20367] do_SYSENTER_32+0x1b/0x20 [ 1283.152657][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1283.159072][T20367] [ 1283.161412][T20367] Uninit was stored to memory at: [ 1283.166686][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1283.172055][T20367] get_compat_msghdr+0x10c/0x280 [ 1283.177115][T20367] ___sys_recvmsg+0x289/0xb40 [ 1283.182147][T20367] do_recvmmsg+0x7c9/0x1200 [ 1283.186749][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.192126][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1283.198740][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1283.204127][T20367] do_fast_syscall_32+0x33/0x70 [ 1283.209038][T20367] do_SYSENTER_32+0x1b/0x20 [ 1283.213782][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1283.220208][T20367] [ 1283.222715][T20367] Uninit was stored to memory at: [ 1283.227857][T20367] __get_compat_msghdr+0x6ea/0x9e0 [ 1283.233128][T20367] get_compat_msghdr+0x10c/0x280 [ 1283.238163][T20367] ___sys_recvmsg+0x289/0xb40 [ 1283.243002][T20367] do_recvmmsg+0x7c9/0x1200 [ 1283.247566][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.252421][T20367] __ia32_compat_sys_recvmmsg_time32+0x16b/0x1d0 [ 1283.258818][T20367] __do_fast_syscall_32+0x95/0xf0 [ 1283.264015][T20367] do_fast_syscall_32+0x33/0x70 [ 1283.268950][T20367] do_SYSENTER_32+0x1b/0x20 [ 1283.273631][T20367] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1283.280012][T20367] [ 1283.282451][T20367] Local variable msg_sys created at: [ 1283.287764][T20367] do_recvmmsg+0xc9/0x1200 [ 1283.292350][T20367] __sys_recvmmsg+0x520/0x6f0 [ 1283.352183][ T3547] usbhid 3-1:0.0: can't add hid device: -71 [ 1283.358555][ T3547] usbhid: probe of 3-1:0.0 failed with error -71 [ 1283.396340][ T3547] usb 3-1: USB disconnect, device number 16 10:57:43 executing program 3: syz_io_uring_setup(0x6529, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x3d4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 10:57:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b8fabc44a5d47f45", "898f468dfb5f91d46ca819e07b240bee", "210d27b9", "940ea556ba5c5d30"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="14", 0x7fffefff}, {&(0x7f00000001c0)="a9", 0x1}], 0x2}, 0x0) 10:57:43 executing program 4: socketpair(0x10, 0x3, 0x0, &(0x7f00000012c0)) 10:57:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1283.763536][T20394] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:57:43 executing program 4: bpf$BPF_PROG_DETACH(0x13, 0x0, 0x0) 10:57:44 executing program 3: syz_io_uring_setup(0x6529, &(0x7f0000000400), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 10:57:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0"], 0x50}}, 0x0) [ 1284.322163][ T3547] usb 3-1: new high-speed USB device number 17 using dummy_hcd 10:57:44 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 10:57:44 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) io_setup(0xa756, &(0x7f0000000040)) [ 1284.572696][ T3547] usb 3-1: Using ep0 maxpacket: 16 10:57:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x8c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0xffffff76) r1 = creat(0x0, 0x0) ftruncate(r1, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) 10:57:44 executing program 5: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1284.692653][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.706334][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.717151][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1284.726477][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:57:44 executing program 0: r0 = syz_clone(0x8080, &(0x7f0000000200), 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="721b433dda3637b81e562526335b8318c773cc96b22c5893bc746cc366") syz_clone3(&(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, &(0x7f00000006c0)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=[r0], 0x1}, 0x58) 10:57:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0"], 0x50}}, 0x0) [ 1284.894505][ T3547] usb 3-1: config 0 descriptor?? 10:57:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0000000300000040068000a206f707ed7ca66e7d27eebe49ef83c9e4159c15e16a0c1ca353dcf5ff796ba8cf058950feb375b04b9d11ea5c22ebca8f4d274b4f639cb3d49f85770e91f658e42e3f039bf23d282d471cba44444d9b68c36e7da3a8cfca038e18aa7c05e9d40919ea5c43f844767c4e5c7dd510bd37baa800000000000000b1eef10a1d5b3d"], 0x8c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0xffffff76) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x0) 10:57:45 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x0) [ 1285.456504][T20400] UDC core: couldn't find an available UDC or it's busy: -16 [ 1285.464610][T20400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1285.882408][ T3547] usbhid 3-1:0.0: can't add hid device: -71 [ 1285.888891][ T3547] usbhid: probe of 3-1:0.0 failed with error -71 [ 1285.994090][ T3547] usb 3-1: USB disconnect, device number 17 10:57:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@kfunc]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f0000000080)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[{0x18, 0x1, 0x1, 'k'}], 0x18}, 0x0) 10:57:46 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x9, 0x0, 0x0) 10:57:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(r0) 10:57:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x5, &(0x7f00000011c0)=@framed={{}, [@call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000001200)='GPL\x00', 0x6, 0xb9, &(0x7f0000001300)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:57:46 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) 10:57:46 executing program 4: io_setup(0x7f, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8001]}, 0x8}) 10:57:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:47 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f00000004c0)) [ 1287.115225][T17885] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1287.364476][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1287.482648][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.501083][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.511403][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1287.520816][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.687364][T17885] usb 3-1: config 0 descriptor?? [ 1288.153435][T20441] UDC core: couldn't find an available UDC or it's busy: -16 [ 1288.160919][T20441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1288.452375][T17885] usbhid 3-1:0.0: can't add hid device: -71 [ 1288.458741][T17885] usbhid: probe of 3-1:0.0 failed with error -71 [ 1288.469861][T17885] usb 3-1: USB disconnect, device number 18 10:57:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:48 executing program 3: syz_clone(0x80814000, 0x0, 0x0, 0x0, 0x0, 0x0) 10:57:48 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x4, 0x7ff}, 0x10}, 0x80) 10:57:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$sock(r1, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) 10:57:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:48 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 10:57:49 executing program 5: socketpair(0x28, 0x80002, 0x0, &(0x7f0000000040)) 10:57:49 executing program 0: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001580)) 10:57:49 executing program 4: socketpair(0x2, 0x80003, 0x0, &(0x7f0000000040)) 10:57:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xbf25}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000100)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x86, &(0x7f0000000380)=""/134, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:57:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close(r1) [ 1289.462790][T17885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1289.712791][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1289.832719][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.844464][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.854612][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1289.868999][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.963720][T17885] usb 3-1: config 0 descriptor?? [ 1290.205433][T20471] UDC core: couldn't find an available UDC or it's busy: -16 [ 1290.213432][T20471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1290.435430][T20471] UDC core: couldn't find an available UDC or it's busy: -16 [ 1290.443170][T20471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1290.702682][T17885] usbhid 3-1:0.0: can't add hid device: -71 [ 1290.709200][T17885] usbhid: probe of 3-1:0.0 failed with error -71 [ 1290.743676][T17885] usb 3-1: USB disconnect, device number 19 10:57:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004300)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f00000043c0)='5', 0x1}], 0x1}, 0x0) 10:57:51 executing program 3: recvmsg$unix(0xffffffffffffffff, 0x0, 0xa17ba0ecbb4ec08d) 10:57:51 executing program 5: socketpair(0x28, 0x0, 0x5, &(0x7f0000000000)) 10:57:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, 0x0, &(0x7f0000000180)) 10:57:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:57:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000180)) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:57:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 10:57:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 10:57:51 executing program 0: r0 = shmget(0x3, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/4092) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x3, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) [ 1291.793579][T17885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1292.032439][T17885] usb 3-1: Using ep0 maxpacket: 16 [ 1292.182383][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.194205][T17885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.205617][T17885] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1292.214947][T17885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.273370][T17885] usb 3-1: config 0 descriptor?? [ 1292.515167][T20503] UDC core: couldn't find an available UDC or it's busy: -16 [ 1292.522947][T20503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1292.736941][T20503] UDC core: couldn't find an available UDC or it's busy: -16 [ 1292.744915][T20503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1293.032317][T17885] usbhid 3-1:0.0: can't add hid device: -71 [ 1293.038606][T17885] usbhid: probe of 3-1:0.0 failed with error -71 [ 1293.051952][T17885] usb 3-1: USB disconnect, device number 20 10:57:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:53 executing program 4: socket$inet_sctp(0x2, 0x6, 0x84) 10:57:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x15, 0x0, 0x0) 10:57:53 executing program 3: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x240, 0x10, 0xb}, 0x18) 10:57:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:53 executing program 0: open$dir(&(0x7f0000000440)='./file0\x00', 0x442, 0x0) 10:57:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:53 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x1c0, 0x0) 10:57:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000), 0x10) 10:57:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x4c) 10:57:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) [ 1294.083217][T12511] usb 3-1: new high-speed USB device number 21 using dummy_hcd 10:57:54 executing program 5: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0), 0x4) getrusage(0x0, &(0x7f0000000000)) [ 1294.324937][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1294.442630][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.454330][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.464516][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1294.473862][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.539865][T12511] usb 3-1: config 0 descriptor?? [ 1294.785186][T20532] UDC core: couldn't find an available UDC or it's busy: -16 [ 1294.793129][T20532] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.024383][T20532] UDC core: couldn't find an available UDC or it's busy: -16 [ 1295.032162][T20532] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.322237][T12511] usbhid 3-1:0.0: can't add hid device: -71 [ 1295.328477][T12511] usbhid: probe of 3-1:0.0 failed with error -71 [ 1295.339806][T12511] usb 3-1: USB disconnect, device number 21 10:57:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:55 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 10:57:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10:57:55 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) 10:57:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:55 executing program 5: pipe2(&(0x7f0000000340), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) [ 1295.911168][T20553] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:57:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x388c, 0x0, 0x0, 0x0, 0x80000000}, 0x14) 10:57:56 executing program 3: pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) 10:57:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x75, &(0x7f0000000140), &(0x7f0000000180)=0x8) 10:57:56 executing program 4: socketpair(0x18, 0x0, 0x4, &(0x7f0000000040)) 10:57:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) [ 1296.306814][T20567] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1296.358496][ T3547] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1296.602256][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1296.722379][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.734167][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.744499][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1296.753837][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.767830][ T3547] usb 3-1: config 0 descriptor?? [ 1297.014773][T20558] UDC core: couldn't find an available UDC or it's busy: -16 [ 1297.022643][T20558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.032176][T20558] UDC core: couldn't find an available UDC or it's busy: -16 [ 1297.039781][T20558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.342282][ T3547] usbhid 3-1:0.0: can't add hid device: -71 [ 1297.348617][ T3547] usbhid: probe of 3-1:0.0 failed with error -71 [ 1297.359619][ T3547] usb 3-1: USB disconnect, device number 22 10:57:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:57 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 10:57:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000580), 0x4) 10:57:57 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 10:57:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"218e52acbdb8d4612355468234370a22"}}}}, 0xa0) [ 1297.896102][T20576] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 10:57:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x2) 10:57:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x4}, 0x9c) 10:57:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 10:57:58 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x408000) 10:57:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:58 executing program 3: shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/4092) socket$inet(0x2, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) [ 1298.382625][ T3548] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1298.633256][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1298.753139][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.764487][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.775250][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1298.784597][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.823395][ T3548] usb 3-1: config 0 descriptor?? [ 1299.065550][T20582] UDC core: couldn't find an available UDC or it's busy: -16 [ 1299.073339][T20582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.086848][T20582] UDC core: couldn't find an available UDC or it's busy: -16 [ 1299.094509][T20582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.392336][ T3548] usbhid 3-1:0.0: can't add hid device: -71 [ 1299.398818][ T3548] usbhid: probe of 3-1:0.0 failed with error -71 [ 1299.422703][ T3548] usb 3-1: USB disconnect, device number 23 10:57:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:57:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @ethernet={0x2, @link_local}, @in={0x2, 0x0, @broadcast}}) 10:57:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='X', 0x1) 10:57:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000500), 0x8) 10:57:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:57:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) 10:58:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 10:58:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="95", 0x1}], 0x1}, 0x0) 10:58:00 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x101200, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/202, 0xca}], 0x1, 0x0, 0x0) 10:58:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x44}, 0x48) 10:58:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 1300.412263][ T3547] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1300.662854][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1300.803302][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.814556][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.824691][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1300.834074][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.860867][ T3547] usb 3-1: config 0 descriptor?? [ 1301.107179][T20610] UDC core: couldn't find an available UDC or it's busy: -16 [ 1301.115186][T20610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1301.125202][T20610] UDC core: couldn't find an available UDC or it's busy: -16 [ 1301.133004][T20610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1301.422290][ T3547] usbhid 3-1:0.0: can't add hid device: -71 [ 1301.428630][ T3547] usbhid: probe of 3-1:0.0 failed with error -71 [ 1301.450171][ T3547] usb 3-1: USB disconnect, device number 24 10:58:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x69, 0xa5, 0xa5, 0xff, 0x6a2, 0x6810, 0x4907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x98, 0xc6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)="b37d407cb6912f959c102730ed731c2fd81532b2f7c002163dfc9a0a2a56a883aae4e3bae760a96e950244d358ecda4ea3468996dd1bf87a2b8abd4b9e4c2050e01b35c79157fbfb61fd79b962f7c440a0f90a233b7774d6489d9be57663775342a78eec5140763e94f0", 0x6a}, {0x0}, {&(0x7f0000000280)="17ccbfc7bbe553fea3d1efdaa08f46030f03916fec9f06b8eafbc4bf10ca2c5de2a2221459a9274a2055599a12f1809b2025f8c8a6da64a6d446ee767df5e0d72a3b7c0e1a337a0f5d9016a43f7e1ec303150b6a1bb5432c500c7abdc98f392b86e16224bd628e1349bf73f2e9d5f5d41295163052ea194a83baa98c6ffe3bd319b91d54437e37d575ad98a061a9dc28c6aa4d7f630777f89bfdde97454ec7e762e12867c9431fde0b1bd968160371ca27", 0xb1}, {&(0x7f0000000340)="2d3ae6eb8186bd07f5f002d97b9433274d52ad7c66ba6d54819da3c298fb9a46cace319434dbeb7ed4327831367a7562cccbb88a31e1b4498bbee9689399d7c6aecce2ba80c546ae44b5980f6d7554554422f0ab0e1e67e36cf330420489cd", 0x5f}, {&(0x7f00000003c0)="34daea755d6dbc275b2bb361dcfaa50ad268da3b2f796d3860ff7abad66c3fed494bcb8a9fed1eb277f06b810b14c37df7fa22ebae8628733cae385b30d1f747", 0x40}, {&(0x7f0000000400)="b359d641278cb7a2bc303d35b98d95c460bdb2f09927702a52ab66412bb240791b07bd9fea81a1a1b032941bd05b50dd88622c1d3043844564c3897019e282a7dad0e5754c82ddcee4a4025a5c54f1868ebe2b2b6bb9834ccb022123308e13e7fb4dd0446da8d6ff4728d7a1112e891d6c336b6d44448109818567c491426ce3f7c37a3e43053ff2b9af629f89c6e362708c12591094ffa7d63fda76ea2d99220d03985c30ce582d4390308d35ff88ac237d8e902036bf19", 0xb8}, {0x0}], 0x7) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 10:58:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xb8, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 10:58:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000040001000c0000007f0000000700000005000000ff7f000000000000", @ANYRES32=0x0, @ANYBLOB="3000000000000000840000000100000000ff04000680"], 0x60}, 0x0) 10:58:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:01 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 10:58:02 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) [ 1302.050247][T20631] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) 10:58:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000040001000c0000007f0000000700000005000000ff7f0000", @ANYBLOB="300000000000000084"], 0x60}, 0x0) 10:58:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) 10:58:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:02 executing program 4: memfd_create(&(0x7f0000000540)='\x00', 0x0) [ 1302.282591][T12511] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1302.522252][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1302.642825][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.654921][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.665132][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1302.674478][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.700202][T20646] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1302.810007][T12511] usb 3-1: config 0 descriptor?? [ 1303.055177][T20634] UDC core: couldn't find an available UDC or it's busy: -16 [ 1303.062869][T20634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.299623][T20634] UDC core: couldn't find an available UDC or it's busy: -16 [ 1303.307306][T20634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.345280][T12511] hid (null): unknown global tag 0xd [ 1303.350794][T12511] hid (null): unknown global tag 0xe [ 1303.367796][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001A/input/input40 [ 1303.446872][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001A/input/input41 [ 1303.528422][T12511] kye 0003:0458:5019.001A: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1303.564275][T12511] usb 3-1: USB disconnect, device number 25 10:58:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x80, &(0x7f0000000140)=@string={0x80, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1fc86ddd77561d5a7847ddd157eff489603c4cbcaeb962bffe928899ce8f97bf5608dfd86bfe37e3df4011125bd60c6e9536d4352ad99e6292a0ae8e6c8f92c"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) 10:58:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000900), 0x4) 10:58:04 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) 10:58:04 executing program 4: socket$inet(0x2, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 10:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) [ 1304.206313][T20658] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:04 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 10:58:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x60}, 0x0) 10:58:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 10:58:04 executing program 0: pipe2(0x0, 0x0) socket$inet(0x2, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) [ 1304.582986][T12511] usb 3-1: new high-speed USB device number 26 using dummy_hcd 10:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) [ 1304.833256][T12511] usb 3-1: Using ep0 maxpacket: 16 [ 1304.954373][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.965607][T12511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.975838][T12511] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1304.985173][T12511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.073790][T12511] usb 3-1: config 0 descriptor?? [ 1305.315783][T20664] UDC core: couldn't find an available UDC or it's busy: -16 [ 1305.323750][T20664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1305.611878][T12511] hid (null): unknown global tag 0xd [ 1305.617445][T12511] hid (null): unknown global tag 0xe [ 1305.635716][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001B/input/input42 [ 1305.717619][T12511] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001B/input/input43 [ 1305.734518][T12511] kye 0003:0458:5019.001B: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1305.823000][T12511] usb 3-1: USB disconnect, device number 26 10:58:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x8) 10:58:06 executing program 5: socket$inet_sctp(0x2, 0x9b318fdb88de97eb, 0x84) 10:58:06 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xc57e]}, 0x8}) 10:58:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:06 executing program 0: syz_open_dev$vcsu(0x0, 0x0, 0x0) 10:58:06 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) 10:58:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) connect$inet6(r0, 0x0, 0x0) 10:58:06 executing program 3: socketpair(0xa, 0x3, 0x7, &(0x7f0000000000)) 10:58:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 10:58:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:06 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) [ 1306.893592][ T3548] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1307.142216][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1307.272802][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.284038][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.294215][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1307.303757][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.390459][ T3548] usb 3-1: config 0 descriptor?? [ 1307.634260][T20692] UDC core: couldn't find an available UDC or it's busy: -16 [ 1307.643595][T20692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.909058][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001C/input/input44 [ 1307.999404][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001C/input/input45 [ 1308.067662][ T3548] kye 0003:0458:5019.001C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1308.105067][T12511] usb 3-1: USB disconnect, device number 27 10:58:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:08 executing program 5: r0 = socket(0x10, 0x2, 0x9) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 10:58:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="f60f71038e43c9813e3579383e544914", 0x10) 10:58:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, 0x0) 10:58:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180), 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x2001000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc, 0x0, '\x00', 0xff}]}}) [ 1308.717386][T20712] loop4: detected capacity change from 0 to 4 10:58:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) [ 1308.802157][T20712] EXT4-fs (loop4): Can't read superblock on 2nd try 10:58:08 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x24b8, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xf2e}}}}]}}]}}, 0x0) 10:58:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1309.139599][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1309.149313][T20723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1309.222737][T19774] usb 3-1: new high-speed USB device number 28 using dummy_hcd 10:58:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180), 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x2001000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc, 0x0, '\x00', 0xff}]}}) [ 1309.443163][T20729] loop4: detected capacity change from 0 to 4 [ 1309.462280][T19774] usb 3-1: Using ep0 maxpacket: 16 [ 1309.470242][T20729] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1309.493287][ T3548] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1309.586053][T19774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.597885][T19774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.608809][T19774] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1309.618206][T19774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.833293][T19774] usb 3-1: config 0 descriptor?? [ 1309.903053][ T3548] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.914730][ T3548] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.924887][ T3548] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1310.080744][T20717] UDC core: couldn't find an available UDC or it's busy: -16 [ 1310.088914][T20717] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1310.122428][ T3548] usb 1-1: New USB device found, idVendor=24b8, idProduct=0020, bcdDevice= 0.40 [ 1310.131970][ T3548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.140162][ T3548] usb 1-1: Product: syz [ 1310.144714][ T3548] usb 1-1: Manufacturer: syz [ 1310.149470][ T3548] usb 1-1: SerialNumber: syz [ 1310.349726][T19774] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001D/input/input46 [ 1310.439657][T19774] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001D/input/input47 [ 1310.521480][T19774] kye 0003:0458:5019.001D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1310.541369][T19774] usb 3-1: USB disconnect, device number 28 [ 1310.552823][ T3548] usbhid 1-1:1.0: can't add hid device: -71 [ 1310.559172][ T3548] usbhid: probe of 1-1:1.0 failed with error -71 [ 1310.587989][ T3548] usb 1-1: USB disconnect, device number 23 10:58:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:11 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 10:58:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180), 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x2001000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc, 0x0, '\x00', 0xff}]}}) 10:58:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) [ 1311.127722][T20739] loop4: detected capacity change from 0 to 4 10:58:11 executing program 0: signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1311.208609][T20739] EXT4-fs (loop4): Can't read superblock on 2nd try 10:58:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:11 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000011c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'wmq', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:58:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180), 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x2001000, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc, 0x0, '\x00', 0xff}]}}) 10:58:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1e8, 0xe8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9d1ae1837dc53a9e78c370e6f44686c62036734281e1c98127ec8456eba9"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'macvtap0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) [ 1311.606958][T20755] loop4: detected capacity change from 0 to 4 [ 1311.670293][T20755] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1311.752238][ T3548] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1312.003495][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1312.143431][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.154898][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.165041][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1312.174641][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.258810][ T3548] usb 3-1: config 0 descriptor?? [ 1312.505976][T20752] UDC core: couldn't find an available UDC or it's busy: -16 [ 1312.513990][T20752] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1312.798620][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001E/input/input48 [ 1312.887645][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001E/input/input49 [ 1312.905934][ T3548] kye 0003:0458:5019.001E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1312.987011][T19774] usb 3-1: USB disconnect, device number 29 10:58:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:13 executing program 3: openat$ptmx(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 10:58:13 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, &(0x7f00000000c0)={0x1}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 10:58:13 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x6}, &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) [ 1313.627095][T20776] loop4: detected capacity change from 0 to 4 10:58:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x32, 0x0, &(0x7f0000000040)) [ 1313.700707][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1313.707557][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 10:58:13 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) 10:58:13 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xc57e]}, 0x8}) 10:58:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 1314.131530][T20788] loop4: detected capacity change from 0 to 4 [ 1314.144353][ T3548] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1314.402863][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1314.525801][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.537223][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.547732][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1314.557335][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.578011][ T3548] usb 3-1: config 0 descriptor?? [ 1314.829281][T20778] UDC core: couldn't find an available UDC or it's busy: -16 [ 1314.837453][T20778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1315.098021][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001F/input/input50 [ 1315.187426][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.001F/input/input51 [ 1315.209167][ T3548] kye 0003:0458:5019.001F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1315.295225][T19774] usb 3-1: USB disconnect, device number 30 10:58:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0xffffffffffffff14) 10:58:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 10:58:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000006140)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 1315.922574][T20800] loop4: detected capacity change from 0 to 4 10:58:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:16 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 10:58:16 executing program 3: add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="d3", 0x1, 0xfffffffffffffffb) 10:58:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 10:58:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:16 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) fremovexattr(r0, &(0x7f0000000200)=@random={'btrfs.', '/!-m\'***\\\x17#\x00'}) [ 1316.443675][ T3547] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1316.564959][T20814] loop4: detected capacity change from 0 to 4 [ 1316.682109][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1316.802386][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.813929][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.824221][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1316.833691][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.876678][ T3547] usb 3-1: config 0 descriptor?? [ 1317.125197][T20803] UDC core: couldn't find an available UDC or it's busy: -16 [ 1317.133087][T20803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1317.405439][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0020/input/input52 [ 1317.488034][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0020/input/input53 [ 1317.506466][ T3547] kye 0003:0458:5019.0020: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1317.579979][ T3548] usb 3-1: USB disconnect, device number 31 10:58:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 10:58:18 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 10:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x9002}, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7ffff487, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc, 0x0, '\x00', 0xff}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 10:58:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1318.212833][T20821] loop4: detected capacity change from 0 to 4 10:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@mcast1}}}, 0xe8) 10:58:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:18 executing program 5: syz_clone(0x3b4a132ec76ee04c, 0x0, 0xfffffffffffffd9e, 0x0, 0x0, 0x0) getpid() 10:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1e8, 0xe8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9d1ae1837dc53a9e78c370e6f44686c62036734281e1c98127ec8456eba9"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'macvtap0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 1318.732281][ T3547] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1318.821260][T20835] loop4: detected capacity change from 0 to 4 [ 1318.972411][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1319.093112][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.106844][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.117807][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1319.127178][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.301655][ T3547] usb 3-1: config 0 descriptor?? [ 1319.559129][T20829] UDC core: couldn't find an available UDC or it's busy: -16 [ 1319.567321][T20829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1319.841962][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0021/input/input54 [ 1319.931521][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0021/input/input55 [ 1320.067294][ T3547] kye 0003:0458:5019.0021: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1320.111343][ T3547] usb 3-1: USB disconnect, device number 32 10:58:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) dup3(r1, r0, 0x0) 10:58:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:20 executing program 0: syz_clone3(&(0x7f0000000640)={0x50300000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:58:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x3, 0x3, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 10:58:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5425, 0x1000000) 10:58:21 executing program 5: syz_clone(0x50002000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 10:58:21 executing program 0: syz_clone3(&(0x7f0000000640)={0x50300000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1321.162101][ T3547] usb 3-1: new high-speed USB device number 33 using dummy_hcd 10:58:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1321.512757][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1321.732346][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.744125][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.754434][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1321.763954][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.835165][ T3547] usb 3-1: config 0 descriptor?? [ 1322.077236][T20855] UDC core: couldn't find an available UDC or it's busy: -16 [ 1322.085190][T20855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1322.395963][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0022/input/input56 [ 1322.477919][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0022/input/input57 [ 1322.563655][ T3547] kye 0003:0458:5019.0022: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1322.615953][ T3547] usb 3-1: USB disconnect, device number 33 10:58:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0"], 0x50}}, 0x0) 10:58:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5425, 0x1000000) 10:58:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x3, @private2}}}, 0x108) 10:58:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:23 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 10:58:23 executing program 0: setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, 0x2710}}, &(0x7f0000000500)) [ 1323.276274][T20876] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:58:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random="f2"}]}, 0x1c}}, 0x0) 10:58:23 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 10:58:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5425, 0x1000000) 10:58:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x7, 0x800, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 1323.763057][ T3547] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1323.892367][T20892] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1324.002744][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1324.124985][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.136864][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.147181][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1324.156597][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.268994][ T3547] usb 3-1: config 0 descriptor?? [ 1324.515296][T20882] UDC core: couldn't find an available UDC or it's busy: -16 [ 1324.522979][T20882] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1324.824497][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0023/input/input58 [ 1324.919032][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0023/input/input59 [ 1324.961351][ T3547] kye 0003:0458:5019.0023: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1324.998727][T12516] usb 3-1: USB disconnect, device number 34 10:58:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:25 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=', @ANYBLOB=',r']) 10:58:25 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 10:58:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x5425, 0x1000000) 10:58:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:25 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000800)="2406af5391a3ea9de31dc29cf22b0361c52f41ab59832c565143a03e297ab518d55ed981c7ff3f5ee4545222700167731c1989cd74ad4a387d5194edad4c86ea5078bb683f13ef855535874126a914876d3a6589fe7176123b3b31c5c382b8d3e6be482e56d8de9a167952f6c8e4cb32c601c8680375ea1a83c8be4efd57c34f72a4a3dfa406e64d63397a0091f99331b595b0bf1e4011715f898d87c216c3ed25f2c9a2bd0e7986f7f9fc1a781b6335b14e1d772992e1468955ffe946c0dd30cfc7afa7c39a5c9d8fc0ae5d3f7935927349fdd3dc5d35b985f9244d640ba05eb6f664fbf9e77d81ff500c39831810ce7ee22b43de073182f5717c68cb603795d8f167d8d47e1b459111df783ec249511ed0bb5d4700901ce3aa2b087b0c667cda945f2c717bc978d0542e39a2bc9aa7bfe44ff9ef4f418fb78cb1a53a6ed01c8d4f26a84fabf9d589466109cd2dc24e5d5821f0553fa8247914c0d991f5a29455e66bfa59050ba512fe4871f5dc07dc8fc9c9a14d462ab2a2a832005e6859e1575c62e91bd2303e70db1905b89b425206babadf0786bd7c37db7dbc8568208fd311c137e91d071d8ed3c5dcd36ff1d25b582c222efb36f1811e368b1a38b2568212905f87fe3f2113ac33ea8bd6bf0bd71758475ad80d3bd3942aac0ae10fb2ea86f069bfe262e0c18f80ff17fd173464f9ddc95f58b284c9517f3a32bdc09bc9c9cd6c23098d710059df73f5b1cb2b8ff6bccb7e5be8f6d5b1c6317d60ad140f9860af2ecb767a6bcc2a176fed04d264c13200d3267c61e816a95c24886cacdca7020004360af31bf460813928b4179719e1693db3a17345eccdf121833ce6550cacb29440dc8b413cb1b305945668c49792c47e865b5de8b23d72ebabf4dc3a694a90a18ca50f07f5cba301c5dc76fbe02ad696650aad8f04c8c7523e8692cac223f9f2f70b13b1bf1da3659af08dc9389ac0a85f304258bf98895f8b42d891a38682fa0c954c6ad315ff6fe56a79574a7a94d57119c3ead2fa30424f2532af7af6fc4e402570744e95bba69e12c5479a460ea9d054c16a4e174316daeb3c272e9b9bd8d9deaa7ec66bf75696f272eae741f7fe045016c600432533d3e29af33f9e8065daf977b6830e06abb3f3205e0d6c3d0d6484fb7390198e23104cbbc9c9bc2ce751a77cb2f54f2c753457eb8e07eae10735b9ff65975c2be271be8d09fff1b6e759f8338525640bb46bd55ab7106af3b3255cc0356d442dbf6b1130fc23c4034047ff2cb217ece02f8652b4c18a6339e0e31c5c9bb89a0611d2e269c521887a81903b93f4f10e96f4148de3ebecb279399b1b85277298ae98082e46743433f4c6b4044241a1318e656667d2a15a45d4c925bf38f59dd47368c8c7c1d5ba34956605b0899e03d8b2cc84a12ced6a5afd820bbc5d4bf10a1b24c72de5d609d2302cb0ede395302beab207ad46955350ca970fca5fc9b551862f09ec74847a47c8f63d2664c2f9ebcefbf3deb9b14c86f8597216cc0be03019e7bb65dda74e762b1f6f44468af48f308b3b45b0b5a6931c8599d570ce323082e936d020b45c730eea94a7b959440a51ddad9d4d83c6ca7012cf4fcee44b57e26c6180e4f318c098be29a0c88c6084b31bc43e76f22f239729bca9e8425b7310689b322f5bc48a6770ead63750fb3ad32fc6e97983a78ac62d23038080c1e3301930fbe2f0979e47b915265cc1d9259d43ef70f2dd06f9b17b2111edf47e141d395a43a23bebebe7616e34c62ec140d539443ec2a10090cbfb70b3408e67cb2af152176cee10634df48e1e6e1c699570b51454f61e71c97a8f5cf346a32db98a75f4df3eea1cd64ad72d5c3533deb4c06c9a8244bffe0e1c3a10001136bd2a2d1e21258e34a849d4387ee38a1ba19cd7b7f980ac78ed5d1ffc7431af94a137a50b77786cdf51416bf5634354363a298619dca8ba08f65472133baa6dba9c693e25c047908c2246304b0b460652f35203955f82def25f55cdfd43251358a6efa8c467800740af5c0ae8d0395cdd9288e945bf86c13646a5919d29ea3ccfad271c45ed53f279745d711f265689a6e5cd989bee8bb2f35a8a526d16d65cc90506e40954206d15a20a39f97a4ec405e15e43a38c0e042d9e25ccca7dcbd07fc8c752a71bad04e32a7a125b3604a7319dfdbf3f7e350258a18a9ce80f1446e0b5172e78e45ac92b51668f2f949f35e8d4bc1ff1ddc780992ff0a070966551d207511d89335b58fef4947421ea9a9f140f70f6b2bf4d12f98ea5cce0f5dc2f7c25bcc09ee5df57b54a1d8ad0ea57c6dfc08ce9adb8bd0dc02f1bd97bc0c30d0988c0598f05512c354fbe4ab03a9f6d67a56b65320479f9dd131a9fa261d852e6830c39befa3d292d688a753d4289b007e8d67be3091836add3cbe1a4be41078e0d14721f16e03b1daa54902644e34380daff04cae23bd7b843e56f416ff53ad5fec739f91cd37ecab3f3497b0ddf63bc4eb922a947cb129d393a33f6a263901f78f1c7dfd6bc69c9b70695b6a1b41cccba9cf618909530ab6ef0a8355fb7846915cd17f03a602699f7e944b20f6bd52005535a1de9d638cf2403e1b1418294b4fcf1f57a3480026c8516510ea45d941213dc8b61c7f5fd588ebf90e5d42a2806e03a6149c92b3c235cdc9a5bff63f898119571d5f3dbfdc87fc5ade6c330faf3994a01de8cf7a72a977af306d7f6f7ebbe482cf3124a112b446bf95bb14bd62b92d289865792aea126e7531e86ecf3f3835ac3333fa7b5178b8887e96ef11e523f8ee2f25c76f787ef3fc145e8137842b7942e4fc7d1e832711d68ccd1b29de0e91824c41273c7f9ff73307b8775482e27015d987cfac5de1f81f08ca1213809abf67d89294f0bc1f94423042ffe4022a86137866697f2b06f49a4bea1dd84caf3d7e1e46b820ea508df10cf8be85e6a36ad68057cec53802449565b896b35da27ea5caf3d56ecdbd95efc5c00058775123f95828839ada19251e1cfda74dd5cda6584a70fccd927d3a11ac7e97c5cc504a079e07fcc84ddaef9c4a96f4544adaf3f0e5630bc074f2e0ff54286f919cfb0b83cdfa50d91d71a37ea896b28c8fe3ddbd2604f6a4905c0b88de3f55060e59b898549d46a8b3c47f2c848fbb56819af44f9a812965c00351559714134d1dede283b9aaf693627a3c8ba8208f51c0002112433a0f40637f0bccda26b3f1a434b4e4a283e0c50da149e169253d95ccb3a61c057d6a5282e6894be3315512920e026da86a25ffcdf8ddbe8e246378c4e371a814d67a1b59d040070e9a2e55d5ec9f8a1c31f433a528a78217fc4c6bd5c316fa785d9fab607736dc5643aec2883934993a47b50f425150d549ebf9025ff67da1f6b3ef20365a827088284f74197f8d17d143d407747177bd6797f6ee671931b90b441a5667bc7f2acd415446549000a5df72c688c2b5210c136c41aad16c1a533715fa87a16ee6c468fe7ff3bdcdbc83d9a554cc3d8c5509e620e1e574020fdd24f75108ee818e14dc7acf34d7aaf2119ec84105edbc6e2fc1da23c286a29df07c8925793cea196ce9178ffe1db492f05367eb21f4aa3ea187eed416aac16d5d5a2bbecad77c267bd9c7e47ccdf26fe94ffff8bbdb3b7ef7e2d2433a368afc21936fd99e7ec1f4e20d1f5be7944e3656a481e4fd426ba6dcc419c3fc54776edbdb436e63c39c5bbf3a8f50cf4e55e8e0823809fd9d68964f9668672f5d47a11d3bcf38712ed693812849d00b3cd619e61850231a272af4de6a96008c1356ed9b5e9974ce58027284a6262ddd81c1efc210ca095258ac51d4e353f4b1f8d335dba9b4e184465894f6cc13c4b8fc0555628bcab0c4a0c67d03c2104c45c1641606f4c662f749679e01788de6ae45be099de521bf9ee3ce2dd8bbd0df0a1fdbabd7749a88c5f8debbb248216bb0bd82365bfacd5232fae058c203aba41fe1eb61b8f54a1c7b8df0330cd0dce4d2606359b1ea90c4729f5698bb0b851e7607c231fa7a7955b8cf2c81061bf62f6128191ea5dc8a034c08ab5d9d028c711bf7c5507990b3d2587c4e3880f3781b6821196c115fcc087c151d8db4e478252d82f461ee6dec9a8ce426b48970fb8af93d5fa5598751cf0669fc8521b58bb294eebe8e2ecc827b7cfa7731f36888fbe668a2d109dd42cd29e70f848a70f29203a0a8cc681fa07579d99f88a82882168ceb3d6c60136ec423e5973deed2b52614bf69a75c266aeae72f3336f53c018455b55e7bf74ac8cdd768c124f5a96f7c4db7776704d1ff78275b52f8fb1a101733aa20817b5a4b234b7b29dacf2e99cc3d1cc7e56d61e554f391d1b4b1b073af51ddae6f3b5e5a1659f7d30a292db2b258d460408ea93ba9b2f42d7b7525dac9f610f9d3d0c2bb7f43752d4c42d03fb8a613b6198b2ef2034026220846b4928a8ec09ab5a3d18bd5c6f2aaefc06fc78eb6298e66b63d0e96dfe84b99678cd8f4f31fe2ddb1de56a865c8531e975bc435b184298138b950e03dd85eee8241017356e3150532b0a18fbde89143f61d2c85505dd78ebc4d4bb690c632cecf19d1b1e05989994e9019ae02e26fdf1f108fb173c49c4a983f5bdfe30a89285628b2b052fad95fbfac598512121401a19b3c8d97aca2e9ca90bf8725d9eb45cb2bc74d0e1fa73977deeb51d0d3ad37dc4f1ec20006d00c3b203bdf69a4101096d2e342b832723a612812b9f5ba1ed576c1fcb970b5e3a56401c1516fb185d482a71460f816de0e25a068ca9d7122062745f4e4e9c1bcd1587b5b81781230ef94644bf076384a0204588134fe307ef40bf258a27c6a3243bafdedf763c735b7c09d54a9ff2973404157017126368106a4fcab4f0cb551ed482b241f678249693a9d7b255dda92df5dc2cc9cf8e925fbf11eb22d6b1c438ea5e6830a0bfc2112476e2894a669c9e8de7855b7dbbe43f7b3373eff44d4cb68073b2aa6822996f9401a9b88fed379e5c1ea0e5239ef8faadde1eb57af0189081c4217d67f9944177a2a9712f64a8dbcc71d5de96e356e65c6bdbdcaeda6dc0f492854652b705c45506e659bbd3d63402f99e46fb500e1fee35c08f80211d9ce50dc1309d928f104118856527ecf31eaf03cdf98ba20d68b8de21362287f7de2e025288015e07a1d10475d388f0a53382b93aea6fc91fcf00e2e20790d3e2db773f9ad84c6dfe530a47f91ba702ad97da2151447ff46d15ee5835fad7e6f69f1e98d00b47553a1f62c7fb69160069932b003aa779494de9c496a56213903e41e0e5fc60cb32ae16cb083a940edf5d1f76021cc59fcb6ebe1820efceebe34d08025ed0f35a01747bb748c3c221f37b27d466dd3806ee5483e4514404d0d1854b29f22da3c2a98ce11fbdf55323ac416bbb8cdc1c5bf00ed3a34a6bfe770cdc93a0a02c3feafa1042d7f987fae2467402aaf62c667479b4f6b55e02fd96049880b8f7b69d76a3e294827a60c5bf2db71996aaa51351bfd3aa2af4e15fdff21b8fc7bbfb40572a566a1b7452f1171cfa8e5c1db86f953b328466c3f196d3f6f168e586763085b1ca283d2e170e8bb8f688eef96a3a34ed5b56c02a139027063c04d8f636673f9752b53f5f9e457b45c7d9fa242579e35a759d94c2164a0632cd7f1ae0b851289c5846300955acc598305e8668f84c44d321efd5f092615bb20499ce55e292021326ebc8ed6b8fc08317521e7376e356c211deca81fdb38e771150aa87a7d4b02b85e82cbc0399e179fe7b2756bbfd3155094bf30bdfcb05e7e52bca23bc7ddc1e", 0x1000}], 0x0, 0x0) [ 1325.639250][T20902] loop1: detected capacity change from 0 to 8 [ 1325.653626][T20903] fuse: Unknown parameter 'r' [ 1325.712377][T20901] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:58:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 10:58:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{0x74}, {0x6}]}) 10:58:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x125e, 0x0) 10:58:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:25 executing program 1: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) [ 1326.175243][ T24] audit: type=1326 audit(1655463506.225:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20908 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x0 10:58:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002a40)=[{0x0}], 0x0, 0x0) [ 1326.262409][ T3547] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1326.310155][T20914] loop4: detected capacity change from 0 to 4 [ 1326.398244][T20914] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1326.502082][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1326.622363][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.633942][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.644847][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1326.654368][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.713825][ T3547] usb 3-1: config 0 descriptor?? [ 1326.956116][T20906] UDC core: couldn't find an available UDC or it's busy: -16 [ 1326.963866][T20906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1327.238051][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0024/input/input60 [ 1327.317046][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0024/input/input61 [ 1327.395974][ T3547] kye 0003:0458:5019.0024: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1327.423198][T12516] usb 3-1: USB disconnect, device number 35 10:58:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:28 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40086602, 0x0) 10:58:28 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000280)=[{0x3}, {}, {0x6}]}) 10:58:28 executing program 1: clock_gettime(0xd10c09b46867a7d1, 0x0) 10:58:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:28 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x801c581f, 0x0) [ 1328.045907][T20922] loop4: detected capacity change from 0 to 4 [ 1328.085119][ T24] audit: type=1326 audit(1655463508.135:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20924 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05549 code=0x0 10:58:28 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "1e3c553525247b213d6de4ccaa42c6b5ac5526f2683c8b91e0b22fc9165e5f89684a9aeabd3d2611e541781dd285754035e899a040b182f5cc970949dc5e39e2a632e6b8cc21b8c9e6899304470daa432dd13d140a88df1c2e6a0f99874984564a8961b00b9d8623988badbffa448691ad3df6b523a86cd8f4997591651296f6a9365c71fb841067083f466a4ad1cc31272929a31187b621f5d3fc61242d871348727e62c8e05983e36f37c3de9963d09897eb4023e84b05c57a5d5bdcc0e7d26bde0bd281e072d18aca12a3c2f34b1a895b32f31779132a6b967cfcade5791cf156bc0f24e572c8712dc93cdd9cf2451128092d8f7374971cb3df172672ee77", "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"}) write$cgroup_int(r1, &(0x7f0000000300), 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x488c0, 0x0) io_setup(0x4, &(0x7f0000001240)=0x0) io_submit(r3, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) io_setup(0x8c48, &(0x7f00000000c0)=0x0) io_getevents(r4, 0x2, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6d97883a}}, './file0\x00'}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 10:58:28 executing program 0: keyctl$get_persistent(0x14, 0xee01, 0xfffffffffffffffb) [ 1328.178833][T20922] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:58:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{}, {0x45}]}) 10:58:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 10:58:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:28 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$caif(r0, 0x0, 0x0) [ 1328.605359][ T3547] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1328.704873][T20940] loop4: detected capacity change from 0 to 4 [ 1328.752167][T20940] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1328.852722][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1328.972650][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.983974][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.994559][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1329.004360][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.117297][ T3547] usb 3-1: config 0 descriptor?? [ 1329.365159][T20930] UDC core: couldn't find an available UDC or it's busy: -16 [ 1329.372954][T20930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1329.670658][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0025/input/input62 [ 1329.762821][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0025/input/input63 [ 1329.839843][ T3547] kye 0003:0458:5019.0025: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1329.876263][ T3547] usb 3-1: USB disconnect, device number 36 10:58:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:30 executing program 3: mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4) 10:58:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:30 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140a, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 10:58:30 executing program 0: syz_mount_image$romfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) [ 1330.534141][T20951] loop4: detected capacity change from 0 to 4 10:58:30 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1330.652495][T20951] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1330.812169][ T3547] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1331.062176][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1331.182236][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.196452][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.206612][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1331.216008][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.230027][ T3547] usb 3-1: config 0 descriptor?? 10:58:31 executing program 5: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 10:58:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00') 10:58:31 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}]}) 10:58:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:31 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1331.477016][T20952] UDC core: couldn't find an available UDC or it's busy: -16 [ 1331.485076][T20952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1331.561072][T20959] tmpfs: Bad value for 'nr_blocks' [ 1331.561372][T20960] loop4: detected capacity change from 0 to 4 10:58:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127d, 0x0) [ 1331.678811][T20960] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1331.925727][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0026/input/input64 [ 1332.067633][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0026/input/input65 [ 1332.138686][ T3547] kye 0003:0458:5019.0026: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1332.167757][ T3547] usb 3-1: USB disconnect, device number 37 10:58:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x4020940d, &(0x7f0000000b40)={'ip6tnl0\x00', 0x0}) 10:58:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) capget(0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x416a, 0x0, 0x0, 0x0, "ebbadbe7f0a42a03f73376ebd283044abd7e1e1533aa84ec43e25a18c1ad70504fc7e4214ae6356f969def5ad8c5f5ad2c3296162acb6861c14e223671e2af6f", "1173b594b1ff3f6bff64f4998ee0c78c6dfe33d4af36f62f4cb7ab2088a197d8"}) 10:58:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/13) [ 1332.627593][T20969] loop4: detected capacity change from 0 to 4 10:58:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1332.699646][T20969] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1332.922903][T20975] loop1: detected capacity change from 0 to 1024 [ 1333.022156][T12516] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1333.085408][T20975] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1333.120810][T20975] EXT4-fs (loop1): mount failed [ 1333.292258][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1333.412379][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.423768][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.433943][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1333.445102][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.462824][T12516] usb 3-1: config 0 descriptor?? [ 1333.704716][T20971] UDC core: couldn't find an available UDC or it's busy: -16 [ 1333.712482][T20971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1333.972315][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0027/input/input66 [ 1334.060891][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0027/input/input67 [ 1334.200070][T12516] kye 0003:0458:5019.0027: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1334.284928][T12516] usb 3-1: USB disconnect, device number 38 10:58:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x542, 0x1}, 0x48) 10:58:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002", 0x1d, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x11, 0x67, 0x0, &(0x7f0000000100)) 10:58:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) 10:58:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x41, &(0x7f0000000140)=@string={0x41, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f67f59c6a5b0277145f9fb3f6fe155e49484b9b292471e499117810191079d1"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:58:47 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1347.405339][T20986] loop1: detected capacity change from 0 to 1024 [ 1347.437511][T20991] loop4: detected capacity change from 0 to 4 [ 1347.482990][T20991] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:58:47 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1402, 0x1}, 0x24}}, 0x0) [ 1347.604422][T20986] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1347.625136][T20986] EXT4-fs (loop1): mount failed [ 1347.679470][ T3547] usb 3-1: new high-speed USB device number 39 using dummy_hcd 10:58:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002", 0x1d, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:58:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1347.855084][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1347.923807][ T3547] usb 3-1: Using ep0 maxpacket: 16 10:58:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x41, 0x0, &(0x7f0000000100)) [ 1348.042877][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.054268][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.064557][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1348.073932][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.130689][T21001] loop1: detected capacity change from 0 to 1024 [ 1348.149966][T21002] loop4: detected capacity change from 0 to 4 [ 1348.219154][ T3547] usb 3-1: config 0 descriptor?? [ 1348.233828][T21001] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1348.249968][T21001] EXT4-fs (loop1): mount failed [ 1348.261670][T21002] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:58:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x40002) write$vhost_msg(r0, 0x0, 0x0) 10:58:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1348.480629][T20989] UDC core: couldn't find an available UDC or it's busy: -16 [ 1348.488896][T20989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1348.638768][T21010] loop1: detected capacity change from 0 to 1024 [ 1348.767482][T21010] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1348.786479][T21010] EXT4-fs (loop1): mount failed [ 1348.803639][ T3547] hid (null): unknown global tag 0xd [ 1348.809179][ T3547] hid (null): unknown global tag 0xe [ 1348.850345][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0028/input/input68 [ 1348.945651][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0028/input/input69 [ 1349.024494][ T3547] kye 0003:0458:5019.0028: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1349.058957][ T3547] usb 3-1: USB disconnect, device number 39 10:59:03 executing program 5: r0 = socket(0x2c, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000015c0)=[@iv={0x28, 0x117, 0x2, 0xd, "8e4aa358dfae484dbcfd8bc1d8"}], 0x28}], 0x1, 0x0) 10:59:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002", 0x1d, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:59:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) 10:59:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:59:03 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1363.102703][T21020] loop1: detected capacity change from 0 to 1024 [ 1363.178322][T21026] loop4: detected capacity change from 0 to 4 10:59:03 executing program 0: r0 = socket(0x2c, 0x3, 0x0) sendmsg$alg(r0, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) [ 1363.228935][T21026] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) 10:59:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1363.432374][T12516] usb 3-1: new high-speed USB device number 40 using dummy_hcd 10:59:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x0, 0x34240}, 0x48) [ 1363.604342][T21031] loop1: detected capacity change from 0 to 1024 10:59:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1363.662384][T21033] loop4: detected capacity change from 0 to 4 [ 1363.674654][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1363.700283][T21033] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 1363.792960][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.804630][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.814793][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1363.824105][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.915678][T12516] usb 3-1: config 0 descriptor?? [ 1364.020362][T21039] loop1: detected capacity change from 0 to 1024 [ 1364.155361][T21024] UDC core: couldn't find an available UDC or it's busy: -16 [ 1364.165441][T21024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1364.496526][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0029/input/input70 [ 1364.579000][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0029/input/input71 [ 1364.657701][T12516] kye 0003:0458:5019.0029: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1364.708375][T12516] usb 3-1: USB disconnect, device number 40 [ 1375.150970][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1375.157632][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 10:59:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x541b, 0x0) 10:59:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) capget(0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c04, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x416a, 0x0, 0x0, 0x0, "ebbadbe7f0a42a03f73376ebd283044abd7e1e1533aa84ec43e25a18c1ad70504fc7e4214ae6356f969def5ad8c5f5ad2c3296162acb6861c14e223671e2af6f", "1173b594b1ff3f6bff64f4998ee0c78c6dfe33d4af36f62f4cb7ab2088a197d8"}) 10:59:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) 10:59:15 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:59:15 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1375.976036][T21054] loop4: detected capacity change from 0 to 4 [ 1375.992595][T21055] loop1: detected capacity change from 0 to 1024 10:59:16 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x488c4) [ 1376.083188][T21054] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) 10:59:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1376.232288][ T3547] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1376.404532][T21061] loop1: detected capacity change from 0 to 1024 10:59:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) [ 1376.482916][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1376.556719][T21063] loop4: detected capacity change from 0 to 4 10:59:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1376.603015][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.605573][T21063] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1376.614406][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.630896][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1376.640344][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.676214][ T3547] usb 3-1: config 0 descriptor?? 10:59:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) [ 1376.715218][T21045] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1376.725683][T21045] Buffer I/O error on dev loop4, logical block 0, async page read [ 1376.915074][T21053] UDC core: couldn't find an available UDC or it's busy: -16 [ 1376.923198][T21053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1376.979883][T21069] loop1: detected capacity change from 0 to 1024 [ 1377.257295][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002A/input/input72 [ 1377.348704][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002A/input/input73 [ 1377.419094][ T3547] kye 0003:0458:5019.002A: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1377.461253][ T3547] usb 3-1: USB disconnect, device number 41 10:59:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000021401"], 0x20}}, 0x0) 10:59:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f465", 0x33, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:31 executing program 0: syz_mount_image$romfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa7828, &(0x7f0000000300)) 10:59:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x2, &(0x7f0000000140)=@string={0x2}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:59:31 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 10:59:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1391.947887][T21083] loop1: detected capacity change from 0 to 256 [ 1391.967420][T21084] loop4: detected capacity change from 0 to 4 10:59:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{0x1}, {0x6}]}) [ 1392.011176][T21083] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (128 blocks) [ 1392.020029][T21084] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f465", 0x33, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1392.182631][ T3548] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1392.402973][T21089] loop4: detected capacity change from 0 to 4 [ 1392.421238][T21089] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1392.434235][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 1392.467419][ T24] audit: type=1326 audit(1655463572.515:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21086 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7e549 code=0x0 [ 1392.565490][T21092] loop1: detected capacity change from 0 to 256 [ 1392.583340][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.594522][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.604643][ T3548] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 10:59:32 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @remote}}}}, 0x0) 10:59:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f465", 0x33, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1392.613977][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.663928][T21092] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (128 blocks) [ 1392.748519][ T3548] usb 3-1: config 0 descriptor?? 10:59:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1392.875889][T21096] loop4: detected capacity change from 0 to 4 [ 1392.968310][T21096] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1393.006159][T21079] UDC core: couldn't find an available UDC or it's busy: -16 [ 1393.014145][T21079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1393.063093][T21098] loop1: detected capacity change from 0 to 256 [ 1393.099575][T21098] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (128 blocks) [ 1393.339423][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002B/input/input74 [ 1393.429115][ T3548] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002B/input/input75 [ 1393.506270][ T3548] kye 0003:0458:5019.002B: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1393.528377][ T3548] usb 3-1: USB disconnect, device number 42 10:59:47 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x5, 0x2, 'syz1\x00'}]}, 0x24}}, 0x0) 10:59:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x21, 0x0, &(0x7f0000000100)) 10:59:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 10:59:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ff", 0x37, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x22, &(0x7f0000000140)=@string={0x22, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6c75dec76c7008c4a977745da31ac1f"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:59:47 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 1407.707727][T21111] loop4: detected capacity change from 0 to 4 [ 1407.762509][T21111] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 10:59:47 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x10, 0x1409, 0x60b}, 0x10}}, 0x0) 10:59:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ff", 0x37, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1407.972379][ T3547] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1408.180919][T21118] loop4: detected capacity change from 0 to 4 10:59:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000280)) [ 1408.226188][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1408.270281][T21118] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 1408.343630][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.355328][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.365458][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1408.374975][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:59:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ff", 0x37, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1408.524169][ T3547] usb 3-1: config 0 descriptor?? [ 1408.677856][T21125] loop4: detected capacity change from 0 to 4 [ 1408.696408][T21125] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1408.765356][T21106] UDC core: couldn't find an available UDC or it's busy: -16 [ 1408.773501][T21106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1409.062360][ T3547] hid (null): unknown global tag 0xd [ 1409.082608][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002C/input/input76 [ 1409.167619][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002C/input/input77 [ 1409.186532][ T3547] kye 0003:0458:5019.002C: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1409.276467][ T3548] usb 3-1: USB disconnect, device number 43 10:59:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x603}, 0x14}}, 0x0) 10:59:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1}}) 10:59:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f00000000c0)) 10:59:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x3, &(0x7f0000000140)=@string={0x3, 0x3, "ee"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:59:57 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 1417.391994][T21138] loop4: detected capacity change from 0 to 4 [ 1417.395876][T21137] loop1: detected capacity change from 0 to 1024 [ 1417.468965][T21138] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 10:59:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8903, &(0x7f0000000280)) 10:59:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1417.617855][T21137] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1417.702248][T12516] usb 3-1: new high-speed USB device number 44 using dummy_hcd 10:59:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f00000000c0)) 10:59:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) [ 1417.885265][T21145] loop4: detected capacity change from 0 to 4 [ 1417.942353][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1418.059910][T21145] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1418.068397][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.079858][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.089994][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1418.099444][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.147774][T21149] loop1: detected capacity change from 0 to 1024 [ 1418.258840][T21149] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1418.284271][T12516] usb 3-1: config 0 descriptor?? 10:59:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53", 0x39, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 10:59:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 1418.549823][T21140] UDC core: couldn't find an available UDC or it's busy: -16 [ 1418.558241][T21140] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1418.620709][T21153] loop4: detected capacity change from 0 to 4 [ 1418.680736][T21153] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1418.903050][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002D/input/input78 [ 1418.998002][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002D/input/input79 [ 1419.077340][T12516] kye 0003:0458:5019.002D: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1419.096487][T12516] usb 3-1: USB disconnect, device number 44 11:00:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000a80)='ns/mnt\x00') 11:00:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f00000000c0)) 11:00:12 executing program 0: socket$caif_seqpacket(0x25, 0x5, 0x1) 11:00:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) 11:00:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x3, &(0x7f0000000140)=@string={0x3, 0x3, "ee"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11:00:12 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0x12) [ 1432.292708][T21171] loop1: detected capacity change from 0 to 1024 [ 1432.325134][T21171] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1432.337831][T21170] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:00:12 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 11:00:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 11:00:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1432.552947][T12516] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1432.792650][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1432.816990][T21181] loop1: detected capacity change from 0 to 1024 [ 1432.851320][T21180] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:00:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)) [ 1432.908625][T21181] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1432.922398][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.933748][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.943890][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 11:00:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjquota=']) [ 1432.953248][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.059542][T12516] usb 3-1: config 0 descriptor?? 11:00:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1433.308017][T21186] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1433.317915][T21172] UDC core: couldn't find an available UDC or it's busy: -16 [ 1433.325764][T21172] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1433.449602][T21188] loop1: detected capacity change from 0 to 1024 [ 1433.493049][T21188] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1433.674139][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002E/input/input80 [ 1433.777493][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002E/input/input81 [ 1433.858607][T12516] kye 0003:0458:5019.002E: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1433.887989][T12516] usb 3-1: USB disconnect, device number 45 [ 1436.579887][ T1192] ieee802154 phy0 wpan0: encryption failed: -22 [ 1436.586707][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 11:00:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8940, &(0x7f0000000280)) 11:00:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000060c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="f2", 0x1}], 0x1}}], 0x1, 0x0) 11:00:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 11:00:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 11:00:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x3, &(0x7f0000000140)=@string={0x3, 0x3, "ee"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11:00:27 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0x12) [ 1448.039413][T21201] loop4: detected capacity change from 0 to 4 [ 1448.084377][T21202] loop1: detected capacity change from 0 to 1024 [ 1448.149294][T21202] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 11:00:28 executing program 0: getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x3], 0x1, 0x0, 0x0, [{}]}, 0x88) 11:00:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 11:00:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1448.341986][T19774] usb 3-1: new high-speed USB device number 46 using dummy_hcd 11:00:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000380)=[{}], 0x0}, &(0x7f0000000500)=0x108) [ 1448.572376][T21209] loop4: detected capacity change from 0 to 4 [ 1448.582977][T19774] usb 3-1: Using ep0 maxpacket: 16 [ 1448.620682][T21211] loop1: detected capacity change from 0 to 1024 11:00:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 1448.702928][T19774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.714263][T19774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.724769][T19774] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1448.734155][T19774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.809525][T21211] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 11:00:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) [ 1448.854075][T19774] usb 3-1: config 0 descriptor?? [ 1449.017401][T21216] loop4: detected capacity change from 0 to 4 [ 1449.115114][T21200] UDC core: couldn't find an available UDC or it's busy: -16 [ 1449.122994][T21200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1449.282283][T21205] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1449.425803][T19774] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002F/input/input82 [ 1449.510226][T19774] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.002F/input/input83 [ 1449.578278][T19774] kye 0003:0458:5019.002F: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1449.629317][T19774] usb 3-1: USB disconnect, device number 46 11:00:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x490, 0x0, 0x130, 0x3f8, 0x98, 0x130, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@ip={@empty, @private, 0xffffffff, 0xffffff00, 'bridge0\x00', 'netdevsim0\x00', {}, {}, 0xc, 0x1}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x40}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dummy0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [], 0x4, 0x3}}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x4], 0x1, 0x4}, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 11:00:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) 11:00:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[]) 11:00:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in6=@local}, 0x0, @in6=@private0}}, 0xe8) 11:00:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x13, &(0x7f0000000140)=@string={0x13, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11:00:47 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300), 0x12) [ 1467.955762][T21229] loop4: detected capacity change from 0 to 4 [ 1467.967151][T21231] loop1: detected capacity change from 0 to 1024 [ 1468.020799][T21229] EXT4-fs (loop4): Can't read superblock on 2nd try 11:00:48 executing program 0: pipe(&(0x7f00000003c0)) [ 1468.076579][T21231] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 11:00:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[]) 11:00:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400), 0x0, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1468.252723][T12516] usb 3-1: new high-speed USB device number 47 using dummy_hcd 11:00:48 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 1468.522497][T12516] usb 3-1: Using ep0 maxpacket: 16 [ 1468.531615][T21239] loop4: detected capacity change from 0 to 4 [ 1468.572288][T21241] loop1: detected capacity change from 0 to 1024 [ 1468.579394][T21239] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1468.622581][T21241] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 64 [ 1468.653258][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.665004][T12516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.675304][T12516] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1468.684833][T12516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:00:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1468.762533][T12516] usb 3-1: config 0 descriptor?? [ 1468.778177][T21234] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1468.788288][T21234] Buffer I/O error on dev loop1, logical block 0, async page read [ 1468.796504][T21234] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1468.805944][T21234] Buffer I/O error on dev loop1, logical block 3, async page read 11:00:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)='PMM\x00', 0x4, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1469.015523][T21230] UDC core: couldn't find an available UDC or it's busy: -16 [ 1469.025238][T21230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1469.070450][T21248] loop4: detected capacity change from 0 to 4 [ 1469.127498][T21248] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1469.188956][T21250] loop1: detected capacity change from 0 to 1024 [ 1469.344111][T12516] hid (null): unknown global tag 0xd [ 1469.394147][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0030/input/input84 [ 1469.487732][T12516] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0030/input/input85 [ 1469.512234][T12516] kye 0003:0458:5019.0030: input,hidraw0: USB HID v0.00 Pointer [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1469.555590][T12516] usb 3-1: USB disconnect, device number 47 [ 1470.012775][T21250] EXT4-fs warning (device loop1): ext4_multi_mount_protect:330: MMP startup interrupted, failing mount [ 1470.012775][T21250] 11:01:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 11:01:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000105804195000000000000109022400010000000009040000010300000009210000000122dc0109058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x32b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}, {0x13, &(0x7f0000000140)=@string={0x13, 0x3, "eeb1e74ee8d8b1d1eaa35dd5c667f9f3c6"}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11:01:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000440)={r2}, &(0x7f00000003c0)=0xb0) 11:01:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)='PMM\x00', 0x4, 0x10000}], 0x0, &(0x7f00000000c0)) 11:01:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r2 = socket$inet6_udplite(0x1c, 0x2, 0x88) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x32, &(0x7f0000000040)={r4}, 0x8) 11:01:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300), 0x12) [ 1485.796360][T21259] loop1: detected capacity change from 0 to 1024 [ 1485.806145][T21260] loop4: detected capacity change from 0 to 4 [ 1485.875971][T21260] EXT4-fs (loop4): Can't read superblock on 2nd try 11:01:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) [ 1486.093024][ T3547] usb 3-1: new high-speed USB device number 48 using dummy_hcd 11:01:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xa) [ 1486.335933][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 1486.443093][T21271] loop4: detected capacity change from 0 to 4 [ 1486.488955][T21271] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1486.493682][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.506746][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.516999][ T3547] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1486.526425][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:01:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 11:01:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) [ 1486.573906][ T3547] usb 3-1: config 0 descriptor?? [ 1486.621963][T21259] EXT4-fs warning (device loop1): ext4_multi_mount_protect:330: MMP startup interrupted, failing mount [ 1486.621963][T21259] 11:01:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000020000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000012400)='PMM\x00', 0x4, 0x10000}], 0x0, &(0x7f00000000c0)) [ 1486.789280][T21275] loop4: detected capacity change from 0 to 4 [ 1486.817412][T21275] EXT4-fs (loop4): Can't read superblock on 2nd try [ 1486.839660][T21262] UDC core: couldn't find an available UDC or it's busy: -16 [ 1486.847945][T21262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:01:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffa}, 0x14) 11:01:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='grpjq']) [ 1486.996244][T21279] loop1: detected capacity change from 0 to 1024 [ 1487.212983][ T3547] hid (null): unknown global tag 0xd [ 1487.275605][T21283] loop4: detected capacity change from 0 to 4 [ 1487.295847][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0031/input/input86 [ 1487.334016][T21283] ext4: Unknown parameter 'grpjq' [ 1487.387540][ T3547] input: HID 0458:5019 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5019.0031/input/input87 [ 1487.460669][ T3547] ===================================================== [ 1487.467980][ T3547] BUG: KMSAN: uninit-value in string+0x3da/0x710 [ 1487.474438][ T3547] string+0x3da/0x710 [ 1487.478464][ T3547] vsnprintf+0x2036/0x3460 [ 1487.482909][ T3547] pointer+0x18e8/0x1f70 [ 1487.487178][ T3547] vsnprintf+0x198c/0x3460 [ 1487.491626][ T3547] vprintk_store+0x52e/0x2110 [ 1487.496592][ T3547] vprintk_emit+0x276/0xa70 [ 1487.501205][ T3547] dev_vprintk_emit+0x5ec/0x6cd [ 1487.506108][ T3547] dev_printk_emit+0x1e1/0x223 [ 1487.510911][ T3547] __dev_printk+0x3de/0x460 [ 1487.515509][ T3547] _dev_info+0x1f7/0x23c [ 1487.519787][ T3547] hid_connect+0x30ba/0x31c0 [ 1487.524479][ T3547] hid_hw_start+0x198/0x2a0 [ 1487.529116][ T3547] kye_probe+0xf0/0x8c0 [ 1487.533368][ T3547] hid_device_probe+0x5d6/0x7d0 [ 1487.538263][ T3547] really_probe+0x6cb/0x1350 [ 1487.542897][ T3547] __driver_probe_device+0x3ed/0x530 [ 1487.548226][ T3547] driver_probe_device+0xb3/0x850 [ 1487.553293][ T3547] __device_attach_driver+0x6b4/0x920 [ 1487.558709][ T3547] bus_for_each_drv+0x2da/0x400 [ 1487.563600][ T3547] __device_attach+0x555/0x880 [ 1487.568423][ T3547] device_initial_probe+0x4e/0x60 [ 1487.573490][ T3547] bus_probe_device+0x185/0x400 [ 1487.578396][ T3547] device_add+0x1fff/0x26e0 [ 1487.582926][ T3547] hid_add_device+0x7fc/0x970 [ 1487.587647][ T3547] usbhid_probe+0x180c/0x1b40 [ 1487.592415][ T3547] usb_probe_interface+0xe8b/0x1580 [ 1487.597704][ T3547] really_probe+0x6cb/0x1350 [ 1487.602421][ T3547] __driver_probe_device+0x3ed/0x530 [ 1487.607755][ T3547] driver_probe_device+0xb3/0x850 [ 1487.612907][ T3547] __device_attach_driver+0x6b4/0x920 [ 1487.618346][ T3547] bus_for_each_drv+0x2da/0x400 [ 1487.623234][ T3547] __device_attach+0x555/0x880 [ 1487.628037][ T3547] device_initial_probe+0x4e/0x60 [ 1487.633104][ T3547] bus_probe_device+0x185/0x400 [ 1487.637993][ T3547] device_add+0x1fff/0x26e0 [ 1487.642522][ T3547] usb_set_configuration+0x36bd/0x3cf0 [ 1487.648028][ T3547] usb_generic_driver_probe+0x140/0x300 [ 1487.653691][ T3547] usb_probe_device+0x30f/0x570 [ 1487.658589][ T3547] really_probe+0x6cb/0x1350 [ 1487.663312][ T3547] __driver_probe_device+0x3ed/0x530 [ 1487.668652][ T3547] driver_probe_device+0xb3/0x850 [ 1487.673739][ T3547] __device_attach_driver+0x6b4/0x920 [ 1487.679156][ T3547] bus_for_each_drv+0x2da/0x400 [ 1487.684057][ T3547] __device_attach+0x555/0x880 [ 1487.689294][ T3547] device_initial_probe+0x4e/0x60 [ 1487.694726][ T3547] bus_probe_device+0x185/0x400 [ 1487.699614][ T3547] device_add+0x1fff/0x26e0 [ 1487.704146][ T3547] usb_new_device+0x1b93/0x2950 [ 1487.709027][ T3547] hub_event+0x5929/0x88a0 [ 1487.713475][ T3547] process_one_work+0xe67/0x1860 [ 1487.718516][ T3547] worker_thread+0x1100/0x21f0 [ 1487.723366][ T3547] kthread+0x3c7/0x500 [ 1487.727495][ T3547] ret_from_fork+0x1f/0x30 [ 1487.731982][ T3547] [ 1487.734317][ T3547] Local variable prefix created at: [ 1487.739533][ T3547] record_print_text+0x13c/0x8e0 [ 1487.744525][ T3547] console_unlock+0x10bf/0x20e0 [ 1487.749441][ T3547] [ 1487.751773][ T3547] CPU: 1 PID: 3547 Comm: kworker/1:4 Not tainted 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1487.761737][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.771829][ T3547] Workqueue: usb_hub_wq hub_event [ 1487.776893][ T3547] ===================================================== [ 1487.783879][ T3547] Disabling lock debugging due to kernel taint [ 1487.790037][ T3547] Kernel panic - not syncing: kmsan.panic set ... [ 1487.796459][ T3547] CPU: 1 PID: 3547 Comm: kworker/1:4 Tainted: G B 5.18.0-syzkaller-16253-g2f3064574275 #0 [ 1487.807686][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1487.818026][ T3547] Workqueue: usb_hub_wq hub_event [ 1487.823087][ T3547] Call Trace: [ 1487.826376][ T3547] [ 1487.829324][ T3547] dump_stack_lvl+0x200/0x28c [ 1487.834050][ T3547] dump_stack+0x29/0x2c [ 1487.838244][ T3547] panic+0x502/0xc7a [ 1487.842200][ T3547] ? add_taint+0x185/0x210 [ 1487.846678][ T3547] ? console_unlock+0x1bb0/0x20e0 [ 1487.851847][ T3547] kmsan_report+0x2cc/0x2d0 [ 1487.856406][ T3547] ? __msan_warning+0x92/0x110 [ 1487.861212][ T3547] ? string+0x3da/0x710 [ 1487.865397][ T3547] ? vsnprintf+0x2036/0x3460 [ 1487.870017][ T3547] ? pointer+0x18e8/0x1f70 [ 1487.874465][ T3547] ? vsnprintf+0x198c/0x3460 [ 1487.879087][ T3547] ? vprintk_store+0x52e/0x2110 [ 1487.883993][ T3547] ? vprintk_emit+0x276/0xa70 [ 1487.888721][ T3547] ? dev_vprintk_emit+0x5ec/0x6cd [ 1487.893869][ T3547] ? dev_printk_emit+0x1e1/0x223 [ 1487.899020][ T3547] ? __dev_printk+0x3de/0x460 [ 1487.903749][ T3547] ? _dev_info+0x1f7/0x23c [ 1487.908199][ T3547] ? hid_connect+0x30ba/0x31c0 [ 1487.913112][ T3547] ? hid_hw_start+0x198/0x2a0 [ 1487.917831][ T3547] ? kye_probe+0xf0/0x8c0 [ 1487.922203][ T3547] ? hid_device_probe+0x5d6/0x7d0 [ 1487.927270][ T3547] ? really_probe+0x6cb/0x1350 [ 1487.932162][ T3547] ? __driver_probe_device+0x3ed/0x530 [ 1487.937665][ T3547] ? driver_probe_device+0xb3/0x850 [ 1487.942912][ T3547] ? __device_attach_driver+0x6b4/0x920 [ 1487.948513][ T3547] ? bus_for_each_drv+0x2da/0x400 [ 1487.953588][ T3547] ? __device_attach+0x555/0x880 [ 1487.958568][ T3547] ? device_initial_probe+0x4e/0x60 [ 1487.963817][ T3547] ? bus_probe_device+0x185/0x400 [ 1487.968879][ T3547] ? device_add+0x1fff/0x26e0 [ 1487.973590][ T3547] ? hid_add_device+0x7fc/0x970 [ 1487.978487][ T3547] ? usbhid_probe+0x180c/0x1b40 [ 1487.983378][ T3547] ? usb_probe_interface+0xe8b/0x1580 [ 1487.988800][ T3547] ? really_probe+0x6cb/0x1350 [ 1487.993609][ T3547] ? __driver_probe_device+0x3ed/0x530 [ 1487.999293][ T3547] ? driver_probe_device+0xb3/0x850 [ 1488.004534][ T3547] ? __device_attach_driver+0x6b4/0x920 [ 1488.010148][ T3547] ? bus_for_each_drv+0x2da/0x400 [ 1488.015216][ T3547] ? __device_attach+0x555/0x880 [ 1488.020216][ T3547] ? device_initial_probe+0x4e/0x60 [ 1488.025485][ T3547] ? bus_probe_device+0x185/0x400 [ 1488.030551][ T3547] ? device_add+0x1fff/0x26e0 [ 1488.035260][ T3547] ? usb_set_configuration+0x36bd/0x3cf0 [ 1488.040943][ T3547] ? usb_generic_driver_probe+0x140/0x300 [ 1488.046708][ T3547] ? usb_probe_device+0x30f/0x570 [ 1488.051778][ T3547] ? really_probe+0x6cb/0x1350 [ 1488.056588][ T3547] ? __driver_probe_device+0x3ed/0x530 [ 1488.062095][ T3547] ? driver_probe_device+0xb3/0x850 [ 1488.067338][ T3547] ? __device_attach_driver+0x6b4/0x920 [ 1488.072947][ T3547] ? bus_for_each_drv+0x2da/0x400 [ 1488.078011][ T3547] ? __device_attach+0x555/0x880 [ 1488.083004][ T3547] ? device_initial_probe+0x4e/0x60 [ 1488.088247][ T3547] ? bus_probe_device+0x185/0x400 [ 1488.093338][ T3547] ? device_add+0x1fff/0x26e0 [ 1488.098155][ T3547] ? usb_new_device+0x1b93/0x2950 [ 1488.103212][ T3547] ? hub_event+0x5929/0x88a0 [ 1488.107853][ T3547] ? process_one_work+0xe67/0x1860 [ 1488.113005][ T3547] ? worker_thread+0x1100/0x21f0 [ 1488.117998][ T3547] ? kthread+0x3c7/0x500 [ 1488.122283][ T3547] ? ret_from_fork+0x1f/0x30 [ 1488.126921][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.132081][ T3547] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1488.138032][ T3547] __msan_warning+0x92/0x110 [ 1488.142677][ T3547] string+0x3da/0x710 [ 1488.146695][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.151859][ T3547] vsnprintf+0x2036/0x3460 [ 1488.156328][ T3547] pointer+0x18e8/0x1f70 [ 1488.160612][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.165771][ T3547] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1488.171644][ T3547] vsnprintf+0x198c/0x3460 [ 1488.176114][ T3547] vprintk_store+0x52e/0x2110 [ 1488.180866][ T3547] ? snprintf+0x246/0x290 [ 1488.185231][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.190397][ T3547] vprintk_emit+0x276/0xa70 [ 1488.194964][ T3547] dev_vprintk_emit+0x5ec/0x6cd [ 1488.199869][ T3547] dev_printk_emit+0x1e1/0x223 [ 1488.204687][ T3547] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1488.210567][ T3547] __dev_printk+0x3de/0x460 [ 1488.215121][ T3547] _dev_info+0x1f7/0x23c [ 1488.219415][ T3547] ? _dev_info+0x8/0x23c [ 1488.223779][ T3547] hid_connect+0x30ba/0x31c0 [ 1488.228453][ T3547] hid_hw_start+0x198/0x2a0 [ 1488.233004][ T3547] kye_probe+0xf0/0x8c0 [ 1488.237202][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.242367][ T3547] ? keytouch_report_fixup+0xd0/0xd0 [ 1488.247705][ T3547] hid_device_probe+0x5d6/0x7d0 [ 1488.252635][ T3547] ? hid_uevent+0x6a0/0x6a0 [ 1488.257182][ T3547] really_probe+0x6cb/0x1350 [ 1488.261829][ T3547] __driver_probe_device+0x3ed/0x530 [ 1488.267199][ T3547] driver_probe_device+0xb3/0x850 [ 1488.272384][ T3547] __device_attach_driver+0x6b4/0x920 [ 1488.277806][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.282971][ T3547] bus_for_each_drv+0x2da/0x400 [ 1488.287859][ T3547] ? deferred_probe_work_func+0x4c0/0x4c0 [ 1488.293637][ T3547] __device_attach+0x555/0x880 [ 1488.298455][ T3547] ? __cgroup_bpf_run_filter_sock_ops+0x401/0x730 [ 1488.304921][ T3547] device_initial_probe+0x4e/0x60 [ 1488.310004][ T3547] bus_probe_device+0x185/0x400 [ 1488.314895][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.320064][ T3547] device_add+0x1fff/0x26e0 [ 1488.324618][ T3547] hid_add_device+0x7fc/0x970 [ 1488.329364][ T3547] usbhid_probe+0x180c/0x1b40 [ 1488.334180][ T3547] ? hid_io_error+0x740/0x740 [ 1488.339062][ T3547] usb_probe_interface+0xe8b/0x1580 [ 1488.344327][ T3547] ? usb_register_driver+0x8e0/0x8e0 [ 1488.349659][ T3547] really_probe+0x6cb/0x1350 [ 1488.354307][ T3547] __driver_probe_device+0x3ed/0x530 [ 1488.359643][ T3547] driver_probe_device+0xb3/0x850 [ 1488.364740][ T3547] __device_attach_driver+0x6b4/0x920 [ 1488.370159][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.375323][ T3547] bus_for_each_drv+0x2da/0x400 [ 1488.380220][ T3547] ? deferred_probe_work_func+0x4c0/0x4c0 [ 1488.386006][ T3547] __device_attach+0x555/0x880 [ 1488.390816][ T3547] ? __cgroup_bpf_run_filter_sock_ops+0x401/0x730 [ 1488.397624][ T3547] device_initial_probe+0x4e/0x60 [ 1488.402695][ T3547] bus_probe_device+0x185/0x400 [ 1488.407582][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.412751][ T3547] device_add+0x1fff/0x26e0 [ 1488.417295][ T3547] usb_set_configuration+0x36bd/0x3cf0 [ 1488.422814][ T3547] ? usb_set_configuration+0x3131/0x3cf0 [ 1488.428624][ T3547] usb_generic_driver_probe+0x140/0x300 [ 1488.434212][ T3547] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1488.440071][ T3547] ? usb_choose_configuration+0xed0/0xed0 [ 1488.445833][ T3547] usb_probe_device+0x30f/0x570 [ 1488.450731][ T3547] ? usb_register_device_driver+0x590/0x590 [ 1488.456686][ T3547] really_probe+0x6cb/0x1350 [ 1488.461340][ T3547] __driver_probe_device+0x3ed/0x530 [ 1488.466672][ T3547] driver_probe_device+0xb3/0x850 [ 1488.471749][ T3547] __device_attach_driver+0x6b4/0x920 [ 1488.477167][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.482331][ T3547] bus_for_each_drv+0x2da/0x400 [ 1488.487217][ T3547] ? deferred_probe_work_func+0x4c0/0x4c0 [ 1488.492991][ T3547] __device_attach+0x555/0x880 [ 1488.497817][ T3547] ? __cgroup_bpf_run_filter_sock_ops+0x401/0x730 [ 1488.504898][ T3547] device_initial_probe+0x4e/0x60 [ 1488.509977][ T3547] bus_probe_device+0x185/0x400 [ 1488.514869][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.520207][ T3547] device_add+0x1fff/0x26e0 [ 1488.524754][ T3547] usb_new_device+0x1b93/0x2950 [ 1488.529825][ T3547] hub_event+0x5929/0x88a0 [ 1488.534314][ T3547] ? kmsan_get_metadata+0x33/0x220 [ 1488.539479][ T3547] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 1488.545337][ T3547] ? led_work+0x7d0/0x7d0 [ 1488.549724][ T3547] process_one_work+0xe67/0x1860 [ 1488.554742][ T3547] worker_thread+0x1100/0x21f0 [ 1488.559580][ T3547] kthread+0x3c7/0x500 [ 1488.563714][ T3547] ? worker_clr_flags+0x3a0/0x3a0 [ 1488.568786][ T3547] ? kthread_blkcg+0x120/0x120 [ 1488.573655][ T3547] ret_from_fork+0x1f/0x30 [ 1488.578120][ T3547] [ 1488.581401][ T3547] Kernel Offset: disabled [ 1488.585897][ T3547] Rebooting in 86400 seconds..