YSENTER_32+0x1b/0x20 [ 1067.381515][T15213] do_fast_syscall_32+0x33/0x70 [ 1067.386755][T15189] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.391253][T15213] do_SYSENTER_32+0x1b/0x20 [ 1067.396210][T15189] [ 1067.400870][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.405654][T15189] Uninit was stored to memory at: [ 1067.411956][T15213] [ 1067.411975][T15213] Uninit was stored to memory at: [ 1067.412135][T15213] __get_compat_msghdr+0x514/0x750 [ 1067.416617][T15189] __get_compat_msghdr+0x514/0x750 [ 1067.421523][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1067.426323][T15189] get_compat_msghdr+0x8c/0x1c0 [ 1067.431159][T15213] ___sys_recvmsg+0x19d/0x890 [ 1067.437512][T15189] ___sys_recvmsg+0x19d/0x890 [ 1067.442076][T15213] do_recvmmsg+0x63a/0x10a0 [ 1067.447124][T15189] do_recvmmsg+0x63a/0x10a0 [ 1067.453647][T15213] __sys_recvmmsg+0x113/0x450 [ 1067.458412][T15189] __sys_recvmmsg+0x113/0x450 [ 1067.460756][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1067.465908][T15189] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1067.470395][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1067.475611][T15189] __do_fast_syscall_32+0x87/0xe0 [ 1067.482002][T15213] do_fast_syscall_32+0x33/0x70 [ 1067.486876][T15189] do_fast_syscall_32+0x33/0x70 [ 1067.489216][T15213] do_SYSENTER_32+0x1b/0x20 [ 1067.494357][T15189] do_SYSENTER_32+0x1b/0x20 [ 1067.499449][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.504241][T15189] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.509164][T15213] [ 1067.509183][T15213] Uninit was stored to memory at: [ 1067.513768][T15189] [ 1067.518563][T15213] __get_compat_msghdr+0x514/0x750 [ 1067.523211][T15189] Local variable msg_sys created at: [ 1067.527690][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1067.534032][T15189] do_recvmmsg+0x5f/0x10a0 [ 1067.538689][T15213] ___sys_recvmsg+0x19d/0x890 [ 1067.543822][T15189] __sys_recvmmsg+0x113/0x450 [ 1067.550044][T15213] do_recvmmsg+0x63a/0x10a0 [ 1067.756857][T15213] __sys_recvmmsg+0x113/0x450 [ 1067.761705][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1067.768217][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1067.773491][T15213] do_fast_syscall_32+0x33/0x70 [ 1067.778499][T15213] do_SYSENTER_32+0x1b/0x20 [ 1067.783238][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.789800][T15213] [ 1067.792282][T15213] Uninit was stored to memory at: [ 1067.797535][T15213] __get_compat_msghdr+0x514/0x750 [ 1067.802936][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1067.807987][T15213] ___sys_recvmsg+0x19d/0x890 [ 1067.812898][T15213] do_recvmmsg+0x63a/0x10a0 [ 1067.817550][T15213] __sys_recvmmsg+0x113/0x450 [ 1067.822464][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1067.828884][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1067.834209][T15213] do_fast_syscall_32+0x33/0x70 [ 1067.839215][T15213] do_SYSENTER_32+0x1b/0x20 [ 1067.844003][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1067.850582][T15213] [ 1067.853117][T15213] Local variable msg_sys created at: [ 1067.858495][T15213] do_recvmmsg+0x5f/0x10a0 [ 1067.863141][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.068639][T15213] not chained 720000 origins [ 1068.073475][T15213] CPU: 1 PID: 15213 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1068.084162][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1068.094351][T15213] Call Trace: [ 1068.097728][T15213] [ 1068.100748][T15213] dump_stack_lvl+0x1c8/0x256 [ 1068.105642][T15213] dump_stack+0x1a/0x1c [ 1068.109986][T15213] kmsan_internal_chain_origin+0x78/0x120 [ 1068.115887][T15213] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1068.122138][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.127428][T15213] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1068.133859][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.139145][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.145135][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.150432][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.156437][T15213] ? __get_compat_msghdr+0x5b/0x750 [ 1068.161848][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.167136][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.173147][T15213] ? should_fail+0x3f/0x810 [ 1068.177822][T15213] ? __stack_depot_save+0x21/0x4b0 [ 1068.183110][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.188398][T15213] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1068.194835][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.200121][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.206203][T15213] __msan_chain_origin+0xbd/0x140 [ 1068.211399][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.216756][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.221817][T15213] ? ___sys_recvmsg+0xa9/0x890 [ 1068.226731][T15213] ? do_recvmmsg+0x63a/0x10a0 [ 1068.231569][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.236404][T15213] ? _raw_spin_unlock+0x25/0x40 [ 1068.241452][T15213] ? __schedule+0x1035/0x21d0 [ 1068.246297][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.251596][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.257592][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.262880][T15213] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1068.268883][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.273572][T15213] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1068.280006][T15213] ? __sys_recvmmsg+0x52/0x450 [ 1068.284927][T15213] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.291528][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.296360][T15213] ? kmsan_get_metadata+0x33/0x220 [ 1068.301667][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.308108][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.313294][T15213] ? exit_to_user_mode_prepare+0x119/0x220 [ 1068.319289][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.324306][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.328970][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.335536][T15213] RIP: 0023:0xf7faf549 [ 1068.339726][T15213] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1068.359521][T15213] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1068.368106][T15213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1068.376222][T15213] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1068.384328][T15213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.392437][T15213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.400541][T15213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.408669][T15213] [ 1068.418595][T15213] Uninit was stored to memory at: [ 1068.424464][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.429783][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.434932][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.439762][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.444504][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.449337][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.455848][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.461037][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.466133][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.470784][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.477432][T15213] [ 1068.479833][T15213] Uninit was stored to memory at: [ 1068.485166][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.490475][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.495667][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.500489][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.505250][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.510078][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.516580][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.521759][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.526844][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.531490][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.538126][T15213] [ 1068.540526][T15213] Uninit was stored to memory at: [ 1068.545859][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.551170][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.556309][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.561142][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.565874][T15213] __sys_recvmmsg+0x113/0x450 09:42:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}}, 0x0) 09:42:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 09:42:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="b0", 0x1, 0xad33}], 0x0, &(0x7f0000000440)) 09:42:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xd8, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x20, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x1a, 0x1a, '/proc/capi/capi20ncci\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x24}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x4050) socketpair(0xb, 0x0, 0x0, &(0x7f0000000080)) 09:42:58 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e59e1e40422c3516815b0102030109021200f1ff8000"], 0x0) [ 1068.570727][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.577248][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.582527][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.587546][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.592368][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.598924][T15213] [ 1068.601332][T15213] Uninit was stored to memory at: [ 1068.606678][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.612069][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.617121][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.622032][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.626677][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.631502][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.638015][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.643279][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.648271][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.653012][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.659557][T15213] [ 1068.662044][T15213] Uninit was stored to memory at: [ 1068.667292][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.672692][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.677741][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.682653][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.687309][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.692307][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.698723][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.704040][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.709064][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.713861][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.720422][T15213] [ 1068.722989][T15213] Uninit was stored to memory at: [ 1068.728238][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.733696][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.738752][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.743738][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.748391][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.753358][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.759777][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.765113][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.770121][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.774980][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.781535][T15213] [ 1068.784080][T15213] Uninit was stored to memory at: [ 1068.789346][T15213] __get_compat_msghdr+0x514/0x750 [ 1068.794801][T15213] get_compat_msghdr+0x8c/0x1c0 [ 1068.799868][T15213] ___sys_recvmsg+0x19d/0x890 [ 1068.804775][T15213] do_recvmmsg+0x63a/0x10a0 [ 1068.809448][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.814422][T15213] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1068.820831][T15213] __do_fast_syscall_32+0x87/0xe0 [ 1068.826166][T15213] do_fast_syscall_32+0x33/0x70 [ 1068.831174][T15213] do_SYSENTER_32+0x1b/0x20 [ 1068.835971][T15213] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1068.842619][T15213] [ 1068.845027][T15213] Local variable msg_sys created at: [ 1068.850398][T15213] do_recvmmsg+0x5f/0x10a0 [ 1068.855108][T15213] __sys_recvmmsg+0x113/0x450 [ 1068.924305][T15227] loop3: detected capacity change from 0 to 173 [ 1068.950391][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 09:42:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 09:42:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}]}) 09:42:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000001c0)) [ 1069.213068][ T3147] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1069.613223][ T3147] usb 5-1: config 255 has too many interfaces: 241, using maximum allowed: 32 [ 1069.622835][ T3147] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.633509][ T3147] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 241 [ 1069.803565][ T3147] usb 5-1: New USB device found, idVendor=2c42, idProduct=1635, bcdDevice=5b.81 [ 1069.812997][ T3147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.821245][ T3147] usb 5-1: Product: syz [ 1069.825755][ T3147] usb 5-1: Manufacturer: syz [ 1069.830564][ T3147] usb 5-1: SerialNumber: syz [ 1070.246430][ T3147] usb 5-1: USB disconnect, device number 46 09:43:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') read$FUSE(r0, 0x0, 0x0) 09:43:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x7, 0x6, 0x907, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 09:43:00 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x248101, 0x0) r1 = eventfd2(0x1000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r0}, {r1}, {r2}], 0x3, 0x0) 09:43:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:43:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) 09:43:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2000}, 0x4) 09:43:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:43:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) 09:43:00 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e59e1e40422c3516815b0102030109021200f1ff80000009"], 0x0) 09:43:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 09:43:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r2) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 09:43:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40}}, 0x18) 09:43:01 executing program 1: r0 = getpid() tkill(r0, 0x41) 09:43:01 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={r0, 0x0, 0x1, 0x0, 0x0}, 0x20) [ 1071.633400][ T3560] usb 5-1: new high-speed USB device number 47 using dummy_hcd 09:43:01 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "cfd6b339ec855abf5a1342ddbb3ed4135012d19d86e2659efecb4848d144060404107fe30bfad22fce60cd7faea926e592e38d7d51eb178e4dda3e2463778a", 0x6}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f00000046c0)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "abe9b917ae24745f5de1439d34e5b2278c5bfefa1c292ba789824f36aa64cd6518166e35ed018c30a834ae359090bd1dc5f94ea2ad430fb630d13d8af2fef4"}, 0x60, 0x0, 0x0, &(0x7f0000000280)={0x10}, 0x10}, {&(0x7f0000000340)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "9fa016bf66251c03cbbf6ca96a55f01b4d69e3f714a5b0f8b67528760c68d35e89a2599e1ea3ee00961e52d9e369fe7a74e8884b1d60a8385d3cc1bee50650"}, 0x60, 0x0}], 0x2, 0x0) 09:43:01 executing program 3: add_key(&(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000000200)="9c", 0x1, 0xfffffffffffffffb) 09:43:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1071.992970][ T3560] usb 5-1: config 255 has too many interfaces: 241, using maximum allowed: 32 [ 1072.002248][ T3560] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 241 09:43:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0xff00, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 09:43:02 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$USERIO_CMD_REGISTER(r0, &(0x7f0000000b40), 0x8800000) [ 1072.213674][ T3560] usb 5-1: New USB device found, idVendor=2c42, idProduct=1635, bcdDevice=5b.81 [ 1072.223152][ T3560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.231391][ T3560] usb 5-1: Product: syz [ 1072.236155][ T3560] usb 5-1: Manufacturer: syz [ 1072.244283][ T3560] usb 5-1: SerialNumber: syz 09:43:02 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', 0x0}) [ 1072.666616][ T3560] usb 5-1: USB disconnect, device number 47 09:43:03 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x88402, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) 09:43:03 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88281, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 09:43:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0}) 09:43:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) 09:43:03 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e59e1e40422c3516815b0102030109021200f1ff80000009"], 0x0) [ 1073.407759][T15293] misc userio: The device must be registered before sending interrupts 09:43:03 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000003c0)) 09:43:03 executing program 2: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="80", 0x1}], 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$USERIO_CMD_REGISTER(r0, &(0x7f0000000b40), 0x8800000) 09:43:03 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$fb(r0, &(0x7f0000000040)="eb7e", 0x2) 09:43:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) dup2(r0, r2) 09:43:03 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "cfd6b339ec855abf5a1342ddbb3ed4135012d19d86e2659efecb4848d144060404107fe30bfad22fce60cd7faea926e592e38d7d51eb178e4dda3e2463778a", 0x6}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) [ 1074.053063][ T8542] usb 5-1: new high-speed USB device number 48 using dummy_hcd 09:43:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000ba80)={0x0, 0x0, &(0x7f000000ba40)={&(0x7f0000001200)=@newtaction={0x6c, 0x30, 0x101, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 09:43:04 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "cfd6b339ec855abf5a1342ddbb3ed4135012d19d86e2659efecb4848d144060404107fe30bfad22fce60cd7faea926e592e38d7d51eb178e4dda3e2463778a", 0x6}, 0x60) [ 1074.432832][ T8542] usb 5-1: config 255 has too many interfaces: 241, using maximum allowed: 32 [ 1074.442241][ T8542] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 241 09:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601010000000000000000000000800500010006"], 0x1c}}, 0x0) [ 1074.673860][ T8542] usb 5-1: New USB device found, idVendor=2c42, idProduct=1635, bcdDevice=5b.81 [ 1074.683563][ T8542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.691817][ T8542] usb 5-1: Product: syz [ 1074.696485][ T8542] usb 5-1: Manufacturer: syz [ 1074.704272][ T8542] usb 5-1: SerialNumber: syz 09:43:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x103, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 09:43:05 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x4082, 0x0) 09:43:05 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5460, &(0x7f0000000000)) [ 1075.136434][ T8542] usb 5-1: USB disconnect, device number 48 09:43:05 executing program 3: getrandom(&(0x7f00000001c0)=""/4096, 0x1000, 0x0) 09:43:05 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) 09:43:05 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e59e1e40422c3516815b0102030109021200f1ff80000009"], 0x0) 09:43:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x2, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 09:43:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) 09:43:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x103, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 09:43:06 executing program 2: getresgid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="0629dc166d3fdb7d5f5c"]) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x6}}, './file0\x00'}) syz_open_dev$ndb(&(0x7f0000001440), 0x0, 0x0) syz_clone(0x518a0000, &(0x7f0000001480)="bc21cacfeeedecbf696f6c08b3e32bf238838f71037b87837c5a3288804912d34672256a85208227b786b3e8b814fbc78e91f7537ce4164115826587aa5b61666fb7cb520012ea59cbcc85f83be76cb3eb6f719f999a3a29a9a6a7bfb1db739e8dbce135976764f2a74ac48f07e1587e730a1a631b200bd5394ab3203e7592ff2231bfea5794c62a96ae9db2ee8536292a45dc2fb70095a43be614b980827c2c37e7eb0f18e56c78136a6cfe512e94bd52b64d053d3a1cbb0f770ebdb9ca9340e08ed1837476086640c89ca16aa2bcf68da149966937f6e55ad79fec6ec3c063b094b6a948a898742643dce78934790be695fa7b4d7e737ca1c8", 0xfa, &(0x7f0000001580), 0x0, 0x0) 09:43:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='keyring\x00', 0x0, &(0x7f0000000140)="e4", 0x1, r0) 09:43:06 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$USERIO_CMD_REGISTER(r0, &(0x7f0000000b40), 0xfdef) 09:43:06 executing program 0: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000540)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x2000001, &(0x7f0000013500)) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 09:43:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 1076.672809][ T8542] usb 5-1: new high-speed USB device number 49 using dummy_hcd 09:43:06 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}) 09:43:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x72dfdcd9}, 0x0) 09:43:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000380)={0x1}) [ 1077.033403][ T8542] usb 5-1: config 255 has too many interfaces: 241, using maximum allowed: 32 [ 1077.042760][ T8542] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 241 [ 1077.272774][ T8542] usb 5-1: New USB device found, idVendor=2c42, idProduct=1635, bcdDevice=5b.81 [ 1077.282309][ T8542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.290547][ T8542] usb 5-1: Product: syz [ 1077.295112][ T8542] usb 5-1: Manufacturer: syz [ 1077.299923][ T8542] usb 5-1: SerialNumber: syz [ 1077.754960][ T8542] usb 5-1: USB disconnect, device number 49 [ 1078.205232][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1078.212068][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 09:43:08 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x4072, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x48, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xd7, 0x96, 0xc1, 0x0, 0x1614, 0x802, 0x46e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0xc0, 0x3d, [{{0x9, 0x4, 0xeb, 0x0, 0x4, 0x30, 0x11, 0x92, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, {}, {}, {}]}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x5, &(0x7f0000001280)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000001440)=@string={0x2}}, {0x0, 0x0}]}) 09:43:08 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, 0x0) 09:43:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYBLOB="9593185420e9c79ec8a40100000000010000eb6e2b3007d74a"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000240)=ANY=[@ANYBLOB="be"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') 09:43:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000200)) 09:43:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:43:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@ldst], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}]}]}, 0x38}}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x2e8, 0x0, 0x4, 0x0, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x352}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x9, 0x5, 0x1}, {0x0, 0xf1, 0x2, 0x200000}, {0x98d, 0xa6, 0xff, 0xffffffd8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) 09:43:08 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5452, &(0x7f0000000200)) 09:43:09 executing program 5: poll(0x0, 0x0, 0xf7) [ 1078.922727][ T3147] usb 2-1: new high-speed USB device number 8 using dummy_hcd 09:43:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) [ 1079.173745][ T3147] usb 2-1: Using ep0 maxpacket: 32 09:43:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 1079.302523][ T3147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.319677][ T3147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.523951][ T3147] usb 2-1: New USB device found, idVendor=046d, idProduct=4072, bcdDevice= 0.40 [ 1079.533447][ T3147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.541704][ T3147] usb 2-1: Product: syz [ 1079.546244][ T3147] usb 2-1: Manufacturer: syz [ 1079.551068][ T3147] usb 2-1: SerialNumber: syz 09:43:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae60, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0xc008ae67, &(0x7f0000000040)={0x17}) 09:43:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@ldst], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xaf, 0x2, 0x3c, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x0, 0x80000000, 0x9b}}) [ 1079.956435][T15365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.966623][T15365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.192887][ T3147] usbhid 2-1:1.0: can't add hid device: -22 [ 1080.199451][ T3147] usbhid: probe of 2-1:1.0 failed with error -22 [ 1080.304761][ T3147] usb 2-1: USB disconnect, device number 8 09:43:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@ldst], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x44}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x0, 0x2, 0x3c, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x80, 0x80000000}}) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 09:43:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@ldst], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xaf, 0x2, 0x3c, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x80, 0x80000000, 0x9b}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x324, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x352}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x9, 0x5, 0x1}, {0x0, 0xf1, 0x2, 0x200000}, {0x98d, 0xa6, 0xff, 0xffffffd8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) 09:43:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f00000002c0)="c4", 0x1, r3) keyctl$search(0x7, r4, 0x0, 0x0, 0x0) 09:43:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f00000004c0)=@raw=[@ldst], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x800) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 09:43:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108906, 0x0) 09:43:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8904, 0x0) 09:43:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8981, 0x0) 09:43:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00'}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:43:11 executing program 4: unshare(0x2000400) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0) fcntl$getflags(r0, 0x401) 09:43:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)={[{}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 09:43:12 executing program 2: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_HYPERV_EVENTFD(r2, 0xae64, 0x0) 09:43:12 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r0, 0xccc99b324d677277, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) 09:43:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7, 0x0, "49fe5d5a2856a3b570571c73d776738a11badadd1d3afd85a94c32c8981e88bb95f8a001f398741332697e92634dae8246f358e2b97653fc6c806b11691c8933", "337c668cc800917b1a0f2ba3095f90cecdfc43a667138ecbd2a24afb03588fdac1c537ef47da462e9b4e6cc7b603d5fff3db67671b678693dc13ed0446a3994b", "33068bfa3891aeb1e525cdf204e8cd42e186898560abd2091afaf95fd11a84d1"}) 09:43:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006680), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xc008ae88, 0x0) [ 1082.407301][T15241] udevd[15241]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 1082.439604][T15248] udevd[15248]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory 09:43:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg2\x00'}) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 1082.628918][T15241] udevd[15241]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory 09:43:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000010003b39040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000f00", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) 09:43:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000004200), 0x0, &(0x7f00000042c0)={[{@fat=@fmask}]}) 09:43:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 09:43:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 09:43:13 executing program 4: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_HYPERV_EVENTFD(r2, 0xae41, &(0x7f0000000000)) [ 1083.516540][T15354] udevd[15354]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 1083.535313][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:43:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0406618, 0x0) 09:43:14 executing program 1: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c13e829bb7aaa61) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022010}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002860714800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/58, 0x3a) syz_fuse_handle_req(r0, &(0x7f000000b840)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5001000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000008300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000002"], 0x0, 0x0}) 09:43:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006680), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 09:43:24 executing program 0: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c13e829bb7aaa61) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_setup(0x9, &(0x7f00000003c0)) io_destroy(r1) io_destroy(r0) [ 1097.222212][T15619] FAT-fs (loop5): bogus number of reserved sectors [ 1097.232534][T15619] FAT-fs (loop5): Can't find a valid FAT filesystem 09:43:27 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 09:43:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x0, 0x0, 0x80000000, 0x1, 0x1}, 0x48) 09:43:27 executing program 4: unshare(0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) 09:43:27 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x220000, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) 09:43:27 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) 09:43:28 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102420a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x40200, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x220000, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x12300, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) 09:43:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x20, 0x1ff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 09:43:28 executing program 4: unshare(0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) 09:43:28 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) 09:43:28 executing program 0: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:43:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 09:43:28 executing program 1: fanotify_init(0x10, 0x40000) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) 09:43:29 executing program 2: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x40200, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x220000, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x12300, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0x0) 09:43:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:29 executing program 4: unshare(0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) 09:43:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x18, {0x0, '\x00', @long="00a200"}}}}]}, 0x54}}, 0x0) 09:43:29 executing program 3: select(0x40, &(0x7f0000000140)={0x400000dead4110}, 0x0, 0x0, 0x0) 09:43:29 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) [ 1099.609813][T15660] usb usb9: usbfs: process 15660 (syz-executor.0) did not claim interface 0 before use 09:43:29 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$sock_int(r1, 0xffff, 0x1001, 0x0, 0x0) 09:43:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x18, {0x0, '\x00', @long="00a200"}}}}]}, 0x54}}, 0x0) 09:43:29 executing program 4: unshare(0x2000400) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) 09:43:30 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 09:43:30 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) flistxattr(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, r1, 0x0) 09:43:30 executing program 2: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KIOCSOUND(r0, 0x4b2f, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='\x00 \x00\x00', 0x4}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x1c, 0x52, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc021}, 0xc0) [ 1100.514431][T15675] usb usb9: usbfs: process 15675 (syz-executor.0) did not claim interface 0 before use [ 1100.526616][ T24] audit: type=1326 audit(1659606210.577:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.666178][ T24] audit: type=1326 audit(1659606210.617:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.690506][ T24] audit: type=1326 audit(1659606210.617:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.713497][ T24] audit: type=1326 audit(1659606210.617:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.736443][ T24] audit: type=1326 audit(1659606210.627:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45549 code=0x7ffc0000 09:43:30 executing program 5: r0 = syz_io_uring_setup(0x89, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @remote}}, 0x0) io_uring_enter(r0, 0x5940, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="a90804424b078266ec0dd8e760ee5855", 0x10) 09:43:30 executing program 4: unshare(0x2000400) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) [ 1100.759393][ T24] audit: type=1326 audit(1659606210.627:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.782309][ T24] audit: type=1326 audit(1659606210.627:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45549 code=0x7ffc0000 09:43:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2b) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1100.805233][ T24] audit: type=1326 audit(1659606210.647:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f45549 code=0x7ffc0000 [ 1100.828256][ T24] audit: type=1326 audit(1659606210.647:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45549 code=0x7ffc0000 09:43:31 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 09:43:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:31 executing program 4: unshare(0x2000400) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x54a3, 0x0) 09:43:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 09:43:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2b) flistxattr(0xffffffffffffffff, 0x0, 0x0) 09:43:31 executing program 1: syz_open_dev$evdev(&(0x7f0000001300), 0x100, 0x0) [ 1101.660523][T15698] usb usb9: usbfs: process 15698 (syz-executor.0) did not claim interface 0 before use [ 1101.807884][ T24] audit: type=1326 audit(1659606211.347:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15687 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0b549 code=0x7ffc0000 09:43:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x48050, &(0x7f0000000300), 0x1c) 09:43:32 executing program 2: r0 = open(&(0x7f0000000440)='./file0\x00', 0xfb2, 0x0) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) dup2(r1, r0) 09:43:32 executing program 1: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) 09:43:32 executing program 4: unshare(0x2000400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x54a3, 0x0) 09:43:32 executing program 3: socketpair(0x18, 0x3, 0x0, 0x0) [ 1102.633514][T15709] usb usb9: usbfs: process 15709 (syz-executor.0) did not claim interface 0 before use 09:43:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) clock_nanosleep(0x300, 0x0, &(0x7f0000000080), 0x0) 09:43:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:33 executing program 2: io_setup(0x1ff, &(0x7f0000000000)=0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:43:33 executing program 4: unshare(0x2000400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x54a3, 0x0) 09:43:33 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{&(0x7f00000000c0)="3127a8a51a528e72ff30ccb11efcb008a3cda7731a65d373166cb004de544a64849f308045b0ccff0519d4707138ea0c8fe414f0b6bd1263068b8d8f363d4db23302495610ee70ecf746fb339b4b65f27b59e817709bd57661473e25d61954884e4472f7095fefe6c38c1247f7d09b323d78df15aa751324914a01e06a0a70ac8d181b1a5432dc6c6fedf33003695e4bbd7bdea8d713192c379ea754aef1ed44fb9f03443e194f72a9c38b8f7463533b898342658c72c87c5dbe4bbb132ebc23a4339049bf7f27f66840356eac4a144982a45bb4db28e1131a23c00e88c963075e3204b305ce8da882e5ac2d41deed74d4dcacc002edf665e11073c50b8edfa6a532905010c46ba503cb60e23655a3cf2e6315b709c1efd62943f7d6d54e32bebba5965eddaa823a7cb97116a8c6299ff53b439350c37c079d9d57623c6e44931ad9f2f41c11a7007e17efdca798baafe4b0f27693c0dc027790f9ecce7655ae4832b9895911e36bcaac2edb893747437d0cea9f16437ecd0de71398aa54c3b2c3ee7beff5983981e0655e0abf838ac1b48b5f3d3696426a8717d4b0b8a53f3cb3c07d1dc0659b9af99e8670defcf24437867e1a66729276eb324e155f774cb0ace1af94330ce552886f99c678d570193823f6bbcc808de6a52a73c729f50f9a6d016b4e38d727e1d23bd557894761c2c1303d1a060fac2e85916092df15c99a", 0x200, 0x6}, {0x0}], 0x0, &(0x7f0000001340)={[{'\x00^}:\''}, {'@*#'}, {','}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}], [{@fsname={'fsname', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@smackfshat={'smackfshat', 0x3d, '\xff\xff\xff\xff\xff\xff'}}]}) 09:43:33 executing program 1: ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000040)=""/227) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000180)=0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000001c0)=""/189) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72aa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0xec, [{{0x9, 0x4, 0x0, 0x45, 0x0, 0x3, 0x1, 0x2, 0xce, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0xee6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x20, 0x9}}]}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(0x0, 0x3, 0x101000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000700)=""/79) syz_usb_connect$uac1(0x1, 0xb3, &(0x7f0000000980)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x0, 0xd0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x3, "f9"}, @mixer_unit={0x5, 0x24, 0x4, 0x0, 0xff}, @mixer_unit={0x5, 0x24, 0x4, 0x0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x0, 0x0, 0xb6, "a5", '9'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0xff, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xba, 0x0, 0x40, {0x7, 0x25, 0x1, 0x81, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0xfffd, 0x20, "633c5f370f24"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x9, {0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x140, 0x8, 0x4, 0x2, 0x48, 0x30}, 0x16, &(0x7f0000000ac0)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x38, 0x298}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0xb, 0x3}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_connect$cdc_ecm(0x5, 0x5e, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x3f, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x3, 0xc5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x0, 0xb232}, @obex={0x5, 0x24, 0x15, 0x5}, @acm={0x4, 0x24, 0x2, 0xe}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2, 0x8, 0x8}}}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x1) read$hiddev(0xffffffffffffffff, &(0x7f0000001a80)=""/206, 0xce) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001c00), 0x0, 0x80000) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001c40)=""/114) 09:43:33 executing program 5: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x10821) 09:43:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:33 executing program 4: unshare(0x2000400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x54a3, 0x0) [ 1103.774966][T15730] loop3: detected capacity change from 0 to 1 09:43:33 executing program 2: syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 1103.880235][T15730] Dev loop3: unable to read RDB block 1 [ 1103.889811][T15730] loop3: unable to read partition table [ 1103.926059][T15730] loop3: partition table beyond EOD, truncated [ 1103.935588][T15730] syz-executor.3: attempt to access beyond end of device [ 1103.935588][T15730] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 1103.950672][T15730] SQUASHFS error: Failed to read block 0x0: -5 [ 1103.957300][T15730] unable to read squashfs_super_block [ 1104.152315][ T3147] usb 2-1: new high-speed USB device number 9 using dummy_hcd 09:43:34 executing program 5: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:43:34 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 09:43:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xd554, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)) [ 1104.543132][ T3147] usb 2-1: config 1 interface 0 altsetting 69 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1104.556668][ T3147] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1104.592226][T14909] usb 3-1: new low-speed USB device number 14 using dummy_hcd 09:43:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 1104.842960][ T3147] usb 2-1: New USB device found, idVendor=0eef, idProduct=72aa, bcdDevice= 0.40 [ 1104.852926][ T3147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.861181][ T3147] usb 2-1: Product: syz [ 1104.865833][ T3147] usb 2-1: Manufacturer: syz [ 1104.870685][ T3147] usb 2-1: SerialNumber: syz [ 1105.004850][T14909] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1105.020552][T14909] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1105.031780][T14909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.062699][T10234] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1105.188536][T15745] [U]  09:43:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) [ 1105.260847][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.271392][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:43:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xd554, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x401]) [ 1105.303282][T14909] usb 3-1: string descriptor 0 read error: -22 [ 1105.310095][T14909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.325601][T14909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:43:35 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 1105.347133][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.357052][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.373117][T10234] usb 6-1: Using ep0 maxpacket: 8 [ 1105.414276][T14909] usb 3-1: 0:2 : does not exist [ 1105.513881][T10234] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.530550][T10234] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.540463][T10234] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1105.605516][T15744] usb 3-1: USB disconnect, device number 14 [ 1105.672752][ T3147] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1105.769170][ T3147] usb 2-1: USB disconnect, device number 9 [ 1105.836623][T10234] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.846178][T10234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.854548][T10234] usb 6-1: Product: syz [ 1105.858921][T10234] usb 6-1: Manufacturer: syz [ 1105.863814][T10234] usb 6-1: SerialNumber: syz [ 1105.897486][T15354] udevd[15354]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:43:36 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)={@link_local, @remote, @void, {@generic={0x86dd}}}, 0x0) 09:43:36 executing program 4: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000018c0)={0x3b0615d3c309b03e}, 0x18) 09:43:36 executing program 2: io_setup(0x9, &(0x7f0000000300)=0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 09:43:36 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r0, 0x0) listen(r0, 0x0) [ 1106.383583][T10234] usb 6-1: 0:2 : does not exist 09:43:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 1106.521689][T10234] usb 6-1: USB disconnect, device number 23 [ 1106.791157][T15242] udevd[15242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:43:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b00)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 09:43:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b00)=@deltaction={0x24, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x8}}]}]}, 0x24}}, 0x0) 09:43:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006600010000000000000000000000000009"], 0x24}}, 0x0) 09:43:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x15488480dac30193}, 0x1c}}, 0x0) 09:43:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000001c0)=@in, 0x80) connect(r0, &(0x7f0000000000)=@un=@abs, 0x80) 09:43:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f000000a500)={'ipvs\x00'}, &(0x7f000000a540)=0x1e) 09:43:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008010) 09:43:37 executing program 2: mprotect(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 09:43:38 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_tcp_TCP_ULP(r0, 0x118, 0x1f, 0x0, 0x0) 09:43:38 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x7, 0x0, 0x0, 0x0, 0x0, "253e2310d8bec8d7c2bc8d5a5c567cac38a217f198d7db537ec497b03393d940c9dda5d67eb11ba75729710dda3c735b2d677e042527febc47d8363fd70193", 0x32}, 0x60) 09:43:38 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x301141, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 09:43:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x7, &(0x7f0000000000)=""/246, &(0x7f0000000100)=0xf6) 09:43:38 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0xfffffffffffffd39) 09:43:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000100)) 09:43:38 executing program 3: statx(0xffffffffffffffff, &(0x7f0000007400)='./file0\x00', 0x0, 0x0, 0x0) 09:43:39 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 09:43:39 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x3c}}, 0x0) 09:43:39 executing program 2: clock_getres(0x35862b571a97fe03, 0x0) 09:43:39 executing program 4: socketpair(0x1, 0x0, 0x6af, 0x0) 09:43:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000001c0)=@in, 0x80) bind(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80) 09:43:39 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) 09:43:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80) 09:43:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x10, r1, 0x9, 0x0, 0x0, {{}, {0x0, 0x4}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}}, 0x0) 09:43:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 09:43:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 09:43:40 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 09:43:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x333}, 0x14}}, 0x0) 09:43:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x5, &(0x7f00000051c0)={{0x0, @empty, 0x0, 0x0, 'wrr\x00'}, {@remote}}, 0x44) 09:43:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x3000004, 0x477b12a409912e59, r0, 0x0) 09:43:40 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) 09:43:41 executing program 5: socket$unix(0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000003980), &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0) 09:43:41 executing program 1: io_setup(0x1, &(0x7f0000002040)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 09:43:41 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x31, &(0x7f00000051c0)={{0x0, @empty, 0x0, 0x0, 'wrr\x00'}, {@remote}}, 0x44) 09:43:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 09:43:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[], 0x0) 09:43:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:43:42 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup3(r0, r1, 0x0) r2 = dup3(r1, r0, 0x0) write$tun(r2, 0x0, 0x0) 09:43:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) fcntl$getown(r2, 0x9) 09:43:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[], 0x0) 09:43:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000006c0)) 09:43:42 executing program 3: semget(0x0, 0x2, 0x100) 09:43:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:42 executing program 1: semget$private(0x0, 0x1, 0x46) 09:43:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:43:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[], 0x0) 09:43:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r1, &(0x7f0000000040)) 09:43:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[], 0x0) 09:43:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:43 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) write$FUSE_ATTR(r2, 0x0, 0x0) 09:43:43 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) read$watch_queue(r2, 0x0, 0x0) 09:43:43 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x220000, 0x8) 09:43:43 executing program 5: pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x3a) 09:43:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r0, 0x0, 0xfffffffffffffda7) 09:43:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r0, r1) write$P9_RFLUSH(r2, 0x0, 0x0) 09:43:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:44 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) close(r0) bind$inet(r0, 0x0, 0x0) 09:43:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 09:43:44 executing program 5: readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}], 0x3) 09:43:44 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="5567a24bd8b0", @remote, @val, {@ipv4}}, 0x0) 09:43:44 executing program 1: socket$inet(0x2, 0x3, 0x0) select(0x40, &(0x7f0000000100)={0x8}, &(0x7f0000000180)={0x8}, 0x0, 0x0) 09:43:44 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:44 executing program 4: syz_emit_ethernet(0x400e, &(0x7f0000000100)={@broadcast, @remote}, 0x0) 09:43:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0xb, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:43:45 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0xa041, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0x110) 09:43:45 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)='~', 0x1}], 0x1}}], 0x1, 0x0) 09:43:45 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x40) 09:43:45 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:45 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='~', 0x1}], 0x100000000000007f}}], 0x1, 0x0) 09:43:45 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 09:43:45 executing program 3: syz_clone(0x204200, 0x0, 0x0, 0x0, 0x0, 0x0) 09:43:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) 09:43:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x3, 0xff, 0xc2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 09:43:46 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:46 executing program 5: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0}}, 0x10) 09:43:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x401, 0x100, 0x1, 0x3ff}, 0x48) 09:43:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x3, 0xff}, 0x48) 09:43:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x90) 09:43:46 executing program 4: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000a40)='?', 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x3fe}, 0x98) 09:43:46 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:47 executing program 5: select(0x40, &(0x7f0000000500)={0x3}, 0x0, &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0x2710}) 09:43:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000280), &(0x7f0000000340)=0x88) 09:43:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="86", 0x1}], 0x1, &(0x7f0000000580)=[@dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x1c}, 0x0) 09:43:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/173, 0xad}, 0x0) 09:43:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:43:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, 0x0, 0x0) 09:43:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000080)="ee", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 09:43:48 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) [ 1118.072544][T15964] sctp: [Deprecated]: syz-executor.3 (pid 15964) Use of int in max_burst socket option. [ 1118.072544][T15964] Use struct sctp_assoc_value instead 09:43:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000340), &(0x7f0000000100)=0x98) 09:43:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000d80), 0x8) 09:43:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 09:43:48 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup2(r2, r1) r4 = dup2(r3, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x103, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)=0x30) 09:43:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000380), 0x4) 09:43:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000), 0x4) 09:43:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:49 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff9}, 0x14) 09:43:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x0, 0x1, 'U'}, 0x9) 09:43:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001540)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x2c}, 0x0) 09:43:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, 0x0, 0x0) 09:43:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000100)=0x9, 0x4) 09:43:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:50 executing program 4: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 09:43:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000001380)=@in={0x10, 0x2}, 0x10, &(0x7f0000000d80)=[{&(0x7f00000013c0)="a2", 0x1}], 0x1}, 0x0) 09:43:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080), 0x10) 09:43:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x98) 09:43:50 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x25, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={r3}, 0x14) 09:43:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:50 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000040), &(0x7f0000000100)=0x98) 09:43:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="3ecc3ad4", 0x4}], 0x1}, 0x0) 09:43:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000040), 0x88) 09:43:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}}], 0x48}, 0x0) 09:43:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:51 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 09:43:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x17, 0x0, 0x0) 09:43:51 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0\x00', &(0x7f0000000280)=@ethtool_test}) 09:43:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3d, 0x0, &(0x7f0000000380)) 09:43:52 executing program 4: r0 = socket(0x11, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 09:43:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:52 executing program 1: socket(0xa, 0x80003, 0x7) 09:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000380)) 09:43:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1}}) 09:43:52 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'vlan1\x00', {'ip6gre0\x00'}}) 09:43:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1600bd60, 0x0, &(0x7f0000000380)) 09:43:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:52 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="798ae6", 0x3, 0xc0, &(0x7f0000000240)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 09:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f0000000380)) 09:43:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008850) 09:43:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:53 executing program 5: r0 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'vlan1\x00', {0xfdfdffff}}) 09:43:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f0000000380)) 09:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="94020000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501"], 0x294}}, 0x0) 09:43:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0}}) 09:43:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f0000000380)) 09:43:54 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) [ 1123.920802][T16076] netlink: 640 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'ip6gre0\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1, 0x0, 0x700}}) 09:43:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@map_idx_val], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80) 09:43:54 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x344}) 09:43:54 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:43:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth0_to_bridge\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x5}}) 09:43:54 executing program 4: r0 = socket(0xa, 0x6, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) 09:43:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) 09:43:54 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "36e3ec6177f29a17729d5671b264dfe8583c98196c0a6ffae0b7e4e7a00d5790"}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 09:43:55 executing program 2: syz_open_dev$midi(&(0x7f0000000040), 0x20, 0x4080) 09:43:55 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000440), 0x4) 09:43:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r1, 0x11, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 09:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 09:43:55 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "36e3ec6177f29a17729d5671b264dfe8583c98196c0a6ffae0b7e4e7a00d5790"}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 09:43:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x0, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:55 executing program 2: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='fscrypt:', 0x0) 09:43:56 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101002) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) 09:43:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)) 09:43:56 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "36e3ec6177f29a17729d5671b264dfe8583c98196c0a6ffae0b7e4e7a00d5790"}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 09:43:56 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) 09:43:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x0, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:56 executing program 4: io_setup(0x1, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000002500), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 09:43:56 executing program 2: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x2, @pix={0xffff, 0x80000001, 0x39555659, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}) r0 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000f79000/0x3000)=nil, &(0x7f00007e0000/0x1000)=nil, &(0x7f000059b000/0x4000)=nil, &(0x7f0000475000/0x1000)=nil, &(0x7f0000685000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000b7e000/0x3000)=nil, &(0x7f0000000480)="b283478b40dd853544fc002fb69fa690f874e2551f65bf7901170ea9bd40d3e71475a1b2faa1317f56243ba024f7", 0x2e, r0}, 0x68) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x10, 0x1, @thr={&(0x7f00000007c0)="f2420ac02e90684d0ebbf2f7d197a7c1fed49714284c2e1c66d6866c28d8c726509d5857e02e68bb111105db3ce90acb3c226c21e4f49915317c8e41e58464cf33d9ff0c754ff0f8747a645c9a03a05748a280689abc", &(0x7f0000000840)="ab25c39eb50794096125b84f2a44d81993ec18ef28d6c3895dcb7183138e6d431396b3bc43a6467c6a1b22897fdae4f4ca50d6702019ca9579d12cc505050d5bd3e7a866f01a43b0834807df3bd0fe069eceb61dc8820899708f5311be69c25020f88a99010001686e390340811f3e9a5bac2e6211710937f4ff6a3b3c29ae9221507221dbf034d9"}}) 09:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) 09:43:56 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "36e3ec6177f29a17729d5671b264dfe8583c98196c0a6ffae0b7e4e7a00d5790"}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1f}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 09:43:56 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x2c}}, 0x0) 09:43:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x300000f, 0x11, r2, 0x0) 09:43:57 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x0, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x0, @private}, 0x24}) 09:43:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1, 0x11, r2, 0x0) 09:43:57 executing program 5: openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) 09:43:57 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="597d766800000000000000000000000000000000000000000000000000000000fcb2096bad154c2da9a086564f36bcc3000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}, {0x0}], 0x0, &(0x7f0000016800)) 09:43:58 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000008880), 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0) 09:43:58 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "8e26c29b66c6bc730087cb85c4600400743cf9e2dc3b9bd5189100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"638d7a457228c403c23aeda8983b88a3506562cbd65d68e0bf4b62969c2c2f93"}) 09:43:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='id_legacy\x00', 0x0) 09:43:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d5f7695bbbfe918f956f741c6717dfcd260d4b3e652d74b1106b572a942224b5"}]}]}, 0x44}}, 0x0) 09:43:58 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002640)={&(0x7f0000000f80)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10, 0x0}, 0x0) 09:43:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x80000003, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) 09:43:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) 09:43:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000003400)) 09:43:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00'}) 09:43:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:43:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000002080)='cgroup.stat\x00', 0x0, 0x0) 09:43:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 09:43:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 09:43:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000001c0)="7f", 0x1, 0x6204}]) 09:43:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:00 executing program 3: socketpair(0x3, 0x0, 0xfffffffa, &(0x7f0000000080)) 09:44:00 executing program 2: r0 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8001) 09:44:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000005940)="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", 0xb49, 0x20008040, &(0x7f0000006940)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 09:44:08 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000001480)=[{&(0x7f00000001c0)="7f", 0x1, 0x6204}, {&(0x7f0000000280)="c5", 0x1, 0x7fff}]) 09:44:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 09:44:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891b, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 09:44:08 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000001940)='.\x00', &(0x7f0000001980), 0x0, &(0x7f00000019c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 09:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 09:44:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @mcast1, 0x1f}, 0x1c) 09:44:09 executing program 5: syz_mount_image$hfsplus(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x0, 0x1, &(0x7f00000064c0)=[{0x0, 0x0, 0x7fffffffffffffff}], 0x0, &(0x7f0000000140)) 09:44:09 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 09:44:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:09 executing program 2: syz_read_part_table(0x0, 0x4, &(0x7f0000001480)=[{0x0}, {&(0x7f00000001c0)="7f79e019d24556d3b9e8a9e3806f7f05a6a59e2d50534bc68bef9c2803243c0b44d4ed68646a32a2f378dfd3e40fc7e418c8e3e0572e0de201d6c3a919100bdee87dc42efcecdbe2984a33b42d9e33e3dc09ef37f7a6f6723dd7996162679b2d6cdc2015fe7e99b82cf2b8b8f4c6b2a5ccd60d9eb92b64d3426b3dd61fef83f81df94dc1d815780b907b77e814605292eadc03a86ca1dfe0e70d", 0x9a, 0x6204}, {&(0x7f0000001680)="21e51e8949792e0e75c83e2603dde4cbe3cee97d804c0cef8aaadd8a6c15e84c3c82aa4be4c7c32361dc6a55fa17e7ec143d5e00e0d558d06ee70089126143ea10bc1c1f2090393e02024c5c4571e322b0ad4f2019fb97ed590f45", 0x5b, 0x1}, {&(0x7f0000000280), 0x0, 0x7fff}]) [ 1139.300196][T16212] loop4: detected capacity change from 0 to 127 09:44:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000001a80)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af3010004", 0x2d, 0x11080}], 0x0, &(0x7f0000013c00)) [ 1139.605568][T16220] loop5: detected capacity change from 0 to 264192 [ 1139.626489][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1139.633265][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 09:44:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000001a80)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003", 0x39, 0x11100}], 0x0, &(0x7f0000013c00)) [ 1139.732778][T16220] hfsplus: unable to find HFS+ superblock 09:44:09 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) 09:44:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x10, 0x2}, 0x10) close(r0) 09:44:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x8d}, 0x98) 09:44:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)="b2", 0x1}], 0x1, &(0x7f0000000180)=[@authinfo={0x10}], 0x10}, 0x0) [ 1140.284754][T16230] loop4: detected capacity change from 0 to 512 09:44:10 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 09:44:10 executing program 2: sigaltstack(&(0x7f0000ffb000), 0x0) 09:44:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 1140.529178][T16230] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 09:44:10 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000400)=0x8a, 0x8) [ 1140.697896][T16230] EXT4-fs error (device loop4): ext4_quota_enable:6771: comm syz-executor.4: Bad quota inode # 3 [ 1140.790984][T16230] EXT4-fs warning (device loop4): ext4_enable_quotas:6811: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 09:44:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000004c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={r2, 0x0, 0x0, 0x3ff}, 0x14) [ 1140.903333][T16230] EXT4-fs (loop4): mount failed 09:44:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), 0x98) 09:44:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x8) 09:44:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f00000000c0), 0x4) 09:44:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000080)="f62d5998", 0x4}], 0x1}, 0x0) 09:44:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@prinfo={0x14}], 0x14}, 0x0) 09:44:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000002c0)="9e0121ca050fd55e64af9e3ce7ef7a761267d01f2a2b4719f02f17a4525d878c912cc8dded308de3396c66d8d1ae9b19e4d276d97522a7913847891d8719de86680ced215f6ea01bbd314ea0f9a48b1f7cd97d74d742db636f3dbdc1ef429030f6545cba2d2bd11a26c9e39f93e411008315e66a04fd2ce0e48af40b812bc29816e77de4a042b3ea0a8083384694ba5976", 0x91, 0x0, &(0x7f0000000200)={0x10, 0x2}, 0x10) close(r0) 09:44:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), 0xb) 09:44:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@init={0x14}], 0x14}, 0x0) 09:44:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000340)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x10) 09:44:12 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 09:44:12 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x81}, 0x98) 09:44:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x98) 09:44:12 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="c000000000000000ffff0000000800001db47dcf9e7f54d3e7a7235f0dfb52065393de9e347d4d88896f975a19ab88d26bc13e566280c4bfb464987a852c65567e248027a7241593305e8a80e8af1d317bde5db6eff2ef62842b228d3a249f0287b6297eab15cfe7c48e317a69eb857823b21f302a80118c33acabfbf6e6ab2a308a2b1deb7de15124489afcb0a7bb5f7d07a5f4ced0447594f31b2fb6d01b461a78a148af9769474594c76a9ee1432d75aaad37884203e7351bb4a4b5bcdfd32af2"], 0x140}, 0x0) 09:44:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f00000000c0), 0x4) 09:44:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000140)={0xfff7, 0x1000}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 09:44:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 09:44:13 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x1c, 0x1c, 0x1}, 0x1c) 09:44:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000280), &(0x7f0000000140)=0x98) 09:44:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x8) 09:44:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=[@authinfo={0x10}], 0x10}, 0x0) 09:44:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000010c0)={0x0, 0x3ff, 0x1, 'S'}, 0x9) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 09:44:14 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 09:44:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000012c0), &(0x7f0000001300)=0xc) 09:44:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) read(r0, &(0x7f0000000700)=""/243, 0xf3) sendto(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 09:44:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x488, 0x0, 0x11}, 0x98) 09:44:14 executing program 5: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100004) read(r0, &(0x7f00000003c0)=""/10, 0xa) 09:44:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:15 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r2, r1) 09:44:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x0) 09:44:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000100), 0x8) 09:44:15 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x400, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:44:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000004c0)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r4}, 0x14) 09:44:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="c00000000000010000ff0000000800001db47fcf9e7f54d3e7a7235f0dfbac83af7897b4f96b4d88896f975a19ab88d26bc13e566280c4bfa5c9987a852c65567e248027a7241593305e8a80e8af1d317bde5db6efffef62842b228d3a249f0278018000002a80118c33acabfbf6e6ab2a308a2b1deb7de15124489afcb0a7bb5f7d07a5f4ced0447594ee1b2fb6081b461a78a148af9769474594c76a9ee1432d75aaad37884203e7351bb4a4b5bcdfd32af25983640f82ef36addfcf0fdf8880"], 0x140}, 0x0) 09:44:16 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000400), &(0x7f0000000440)=0xc) 09:44:16 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001bc0)=[{0x0}], 0x1}, 0x0) 09:44:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:16 executing program 2: pipe2(&(0x7f0000000380), 0x0) 09:44:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)="99", 0x1}], 0x1, &(0x7f0000000680)=[{0x10}], 0x10}, 0x0) 09:44:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000), 0x8) 09:44:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="010000e6", @ANYRES32=0x0], &(0x7f0000000000)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r4, &(0x7f0000000040)={0x10}, 0x10) r5 = socket$inet6_sctp(0x1c, 0x1, 0x84) r6 = dup2(r4, r5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x108, &(0x7f0000000080)={r3, 0x0, 0x1}, &(0x7f0000000480)=0x18) 09:44:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000180), 0xc) 09:44:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000280), &(0x7f00000002c0)=0x18) 09:44:17 executing program 5: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) chown(&(0x7f0000000440)='./file0\x00', 0x0, 0xffffffffffffffff) recvfrom(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=@un=@file={0xa}, 0xa) 09:44:17 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x210}, 0x98) 09:44:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100), 0x88) 09:44:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x14) 09:44:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}, 0x14) 09:44:18 executing program 1: ppoll(&(0x7f0000000400), 0x20000000000001e4, &(0x7f0000000440), &(0x7f0000000400), 0x10) 09:44:18 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 09:44:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x58}, 0x8) 09:44:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) 09:44:19 executing program 2: copy_file_range(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 09:44:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="ef", 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x2c}], 0x2c}, 0x0) 09:44:19 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000001140)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 09:44:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000006000)={0x1c, 0x1c, 0x3}, 0x1c) 09:44:19 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x26, 0x0, &(0x7f0000000040)) 09:44:19 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r0, 0x1) 09:44:20 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0xc43d, 0x11}, 0x98) 09:44:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400, 0x3}, 0x14) 09:44:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0xa5}, 0x98) 09:44:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 09:44:20 executing program 4: rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00') 09:44:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000004c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb) 09:44:20 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="99", 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) 09:44:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f00000001c0), &(0x7f0000000040)=0xb0) 09:44:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)=@file={0xa}, 0xa, 0x0}, 0x0) 09:44:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080), 0x8) 09:44:21 executing program 1: socket$inet_sctp(0x2, 0x5, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) socketpair(0x27, 0x80000, 0x3f, &(0x7f0000000380)) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) lstat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)) syz_mount_image$gfs2meta(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0\x00', 0xe1e, 0x6, &(0x7f0000004d40)=[{&(0x7f0000003b00)="49600bfb2852cf0403dcc8ba00cabad2b1a5499df010593f9c5f5209706185003b4e883605e469693c2b9c52bb20125bdff45c3397caa004ea7bc3b0b4074428590b6965f37221fa643c555397a1678235443a3b3def9fa06c590b26100c126fb535a026fd05106094dfe2", 0x6b, 0x101}, {&(0x7f0000003b80)="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", 0x1000, 0x7}, {&(0x7f0000004b80)="0a3ed30c8dd48f3d64fb9aef5a88045363623ae89a33e9578ef4ca7fda0096e79cf34a04f7e7834f3c97918a9b9b8c07891af5a5e1a73bfbe3048bf3cfd5f05133a4f7be2ef28b32360642748b35ffdceb2880a1cc17b99c71a5750b306d935a707c9d4a452de73ce3afe54eb3d9bc7c7826bc3a1ecde0b9100f5a7d2f7367a9372afb6194e6c2dd8df2457a0130404877b9d1e416482574eaf52987bb93b76061321414a3e924e02521a94636ce171ed2c41b5b364ea62772840132", 0xbc, 0x7fffffff}, {&(0x7f0000004c40)="463ffe0de0a11ca5c732a8c5953a79e9385477efd6e1ea65cf9ab5d2972e6a0aab37c7e6daa9193901", 0x29, 0x6}, {&(0x7f0000004c80)="cf1d057fe7dcbaf05bd97ff3b024acac2511940edcb87edd5c81f45ed2e6564d6d0c9124683134cc271de97b26c856a7d87385ccd4f3e26590fd504ac04a2a9dea476921efbf2337eb1af7b08ce7c95fe99b03b3520149a9e6d4fad94c3c68eea80239d193a3f5b1c27b6f22", 0x6c, 0xd64e}, {&(0x7f0000004d00)='\vV', 0x2, 0xfffffffffffffffb}], 0x820003, &(0x7f0000004e00)={[{'&%(*@<{'}, {':'}], [{@uid_lt={'uid<', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) openat$urandom(0xffffffffffffff9c, &(0x7f0000004e40), 0x101102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000006f00)='ns/time\x00') 09:44:21 executing program 0: syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105502, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0x0, 0x0}) 09:44:21 executing program 5: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c860b6986b9b5057cd961c985b257c9c4ff"], 0x30}}, 0x0) 09:44:22 executing program 4: socket(0x3, 0x0, 0x6) 09:44:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) 09:44:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x2000, 0x74) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 09:44:22 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:44:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) 09:44:22 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c"], 0x30}}, 0x0) [ 1153.003613][T16485] not chained 730000 origins [ 1153.008499][T16485] CPU: 1 PID: 16485 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1153.019193][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1153.022567][ T3560] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1153.029334][T16485] Call Trace: [ 1153.029370][T16485] [ 1153.029402][T16485] dump_stack_lvl+0x1c8/0x256 [ 1153.048298][T16485] dump_stack+0x1a/0x1c [ 1153.052701][T16485] kmsan_internal_chain_origin+0x78/0x120 [ 1153.058729][T16485] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1153.065000][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.070334][T16485] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1153.076797][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.082102][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.088113][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.093417][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.099472][T16485] ? __get_compat_msghdr+0x5b/0x750 [ 1153.104895][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.110196][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.116208][T16485] ? should_fail+0x3f/0x810 [ 1153.120901][T16485] ? __stack_depot_save+0x21/0x4b0 [ 1153.126196][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.131495][T16485] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1153.137946][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.143248][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.149259][T16485] __msan_chain_origin+0xbd/0x140 [ 1153.154641][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.160003][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.165071][T16485] ? ___sys_recvmsg+0xa9/0x890 [ 1153.170000][T16485] ? do_recvmmsg+0x63a/0x10a0 [ 1153.174865][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.179743][T16485] ? __schedule+0x1609/0x21d0 [ 1153.184602][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.190080][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.196098][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.201426][T16485] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1153.207444][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.212148][T16485] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1153.218612][T16485] ? __sys_recvmmsg+0x52/0x450 [ 1153.223541][T16485] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.230853][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.235697][T16485] ? kmsan_get_metadata+0x33/0x220 [ 1153.241006][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.247454][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.252661][T16485] ? exit_to_user_mode_prepare+0x119/0x220 [ 1153.258659][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.263719][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.268388][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.275055][T16485] RIP: 0023:0xf7f0b549 [ 1153.279252][T16485] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1153.299871][T16485] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1153.308480][T16485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1153.316613][T16485] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1153.324734][T16485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1153.332860][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.340995][T16485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1153.349150][T16485] [ 1153.360923][T16485] Uninit was stored to memory at: [ 1153.367342][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.372825][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.377920][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.383406][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.388075][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.393043][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.399473][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.404864][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.409888][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.414696][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.421280][T16485] [ 1153.423899][T16485] Uninit was stored to memory at: [ 1153.429254][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.434770][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.439842][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.444859][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.449523][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.454532][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.460996][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.463638][ T3560] usb 2-1: Using ep0 maxpacket: 16 [ 1153.466313][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.476537][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.481205][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.487933][T16485] [ 1153.490350][T16485] Uninit was stored to memory at: [ 1153.495720][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.501222][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.506607][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.511464][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.516248][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.521126][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.527735][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.533141][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.538250][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.543082][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.549654][T16485] [ 1153.552229][T16485] Uninit was stored to memory at: [ 1153.557491][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.562993][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.568063][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.573087][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.577750][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.582768][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.583284][ T3560] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1153.589144][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.598021][ T3560] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1153.603114][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.603209][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.603294][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.613660][ T3560] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.618478][T16485] [ 1153.618496][T16485] Uninit was stored to memory at: [ 1153.618657][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.651632][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.656875][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.661735][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.666598][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.671631][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.678222][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.683616][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.688725][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.693651][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.700304][T16485] [ 1153.702884][T16485] Uninit was stored to memory at: [ 1153.708238][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.713761][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.718822][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.724061][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.728748][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.733815][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.740242][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.745532][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.750642][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.755431][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.762100][T16485] [ 1153.764510][T16485] Uninit was stored to memory at: [ 1153.769775][T16485] __get_compat_msghdr+0x514/0x750 [ 1153.775383][T16485] get_compat_msghdr+0x8c/0x1c0 [ 1153.780561][T16485] ___sys_recvmsg+0x19d/0x890 [ 1153.785512][T16485] do_recvmmsg+0x63a/0x10a0 [ 1153.790199][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.795149][T16485] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1153.801592][T16485] __do_fast_syscall_32+0x87/0xe0 [ 1153.807010][T16485] do_fast_syscall_32+0x33/0x70 [ 1153.812119][T16485] do_SYSENTER_32+0x1b/0x20 [ 1153.816776][T16485] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1153.823456][T16485] [ 1153.825866][T16485] Local variable msg_sys created at: [ 1153.831257][T16485] do_recvmmsg+0x5f/0x10a0 [ 1153.836011][T16485] __sys_recvmmsg+0x113/0x450 [ 1153.883812][ T3560] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.893529][ T3560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.901847][ T3560] usb 2-1: Product: syz [ 1153.907991][ T3560] usb 2-1: Manufacturer: syz [ 1153.912933][ T3560] usb 2-1: SerialNumber: syz 09:44:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) 09:44:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x2000, 0x74) r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) [ 1154.406775][ T3560] usb 2-1: 0:2 : does not exist [ 1154.493783][T16471] not chained 740000 origins [ 1154.498794][T16471] CPU: 1 PID: 16471 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1154.509664][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1154.519894][T16471] Call Trace: [ 1154.523379][T16471] [ 1154.526412][T16471] dump_stack_lvl+0x1c8/0x256 [ 1154.531313][T16471] dump_stack+0x1a/0x1c [ 1154.535765][T16471] kmsan_internal_chain_origin+0x78/0x120 [ 1154.541764][T16471] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1154.548047][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.553440][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1154.559896][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.565208][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.571300][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.576690][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.581557][ T3560] usb 2-1: USB disconnect, device number 10 [ 1154.582642][T16471] ? __get_compat_msghdr+0x5b/0x750 [ 1154.582797][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.582922][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.605390][T16471] ? should_fail+0x3f/0x810 [ 1154.610093][T16471] ? __stack_depot_save+0x21/0x4b0 [ 1154.615402][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.620739][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1154.627192][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.632501][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.638515][T16471] __msan_chain_origin+0xbd/0x140 [ 1154.643759][T16471] __get_compat_msghdr+0x514/0x750 [ 1154.649151][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1154.654218][T16471] ? ___sys_recvmsg+0xa9/0x890 [ 1154.659145][T16471] ? do_recvmmsg+0x63a/0x10a0 [ 1154.664188][T16471] ___sys_recvmsg+0x19d/0x890 [ 1154.669132][T16471] ? __schedule+0x1609/0x21d0 [ 1154.673994][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.679293][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.685296][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.690594][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1154.696612][T16471] do_recvmmsg+0x63a/0x10a0 [ 1154.701305][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1154.707758][T16471] ? __sys_recvmmsg+0x52/0x450 [ 1154.712691][T16471] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1154.719311][T16471] __sys_recvmmsg+0x113/0x450 [ 1154.724172][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1154.729492][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1154.735946][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1154.741152][T16471] ? exit_to_user_mode_prepare+0x119/0x220 [ 1154.747149][T16471] do_fast_syscall_32+0x33/0x70 [ 1154.752168][T16471] do_SYSENTER_32+0x1b/0x20 [ 1154.756832][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1154.763406][T16471] RIP: 0023:0xf7fb7549 [ 1154.767607][T16471] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1154.787419][T16471] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1154.796013][T16471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1154.804156][T16471] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1154.812268][T16471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1154.820371][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.828486][T16471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1154.836622][T16471] [ 1154.846860][T16471] Uninit was stored to memory at: [ 1154.852846][T16471] __get_compat_msghdr+0x514/0x750 [ 1154.858177][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1154.858434][T16210] udevd[16210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.863307][T16471] ___sys_recvmsg+0x19d/0x890 [ 1154.863401][T16471] do_recvmmsg+0x63a/0x10a0 [ 1154.863490][T16471] __sys_recvmmsg+0x113/0x450 [ 1154.893941][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1154.900373][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1154.905703][T16471] do_fast_syscall_32+0x33/0x70 [ 1154.910719][T16471] do_SYSENTER_32+0x1b/0x20 [ 1154.915522][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1154.922187][T16471] [ 1154.924596][T16471] Uninit was stored to memory at: [ 1154.929874][T16471] __get_compat_msghdr+0x514/0x750 [ 1154.935327][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1154.940400][T16471] ___sys_recvmsg+0x19d/0x890 [ 1154.945364][T16471] do_recvmmsg+0x63a/0x10a0 [ 1154.950023][T16471] __sys_recvmmsg+0x113/0x450 [ 1154.954975][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1154.961408][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1154.966729][T16471] do_fast_syscall_32+0x33/0x70 [ 1154.971757][T16471] do_SYSENTER_32+0x1b/0x20 [ 1154.976538][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1154.983214][T16471] [ 1154.985617][T16471] Uninit was stored to memory at: [ 1154.990871][T16471] __get_compat_msghdr+0x514/0x750 [ 1154.996302][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1155.001353][T16471] ___sys_recvmsg+0x19d/0x890 [ 1155.006309][T16471] do_recvmmsg+0x63a/0x10a0 [ 1155.010967][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.015938][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.022476][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1155.027668][T16471] do_fast_syscall_32+0x33/0x70 [ 1155.032800][T16471] do_SYSENTER_32+0x1b/0x20 [ 1155.037473][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.044276][T16471] [ 1155.046687][T16471] Uninit was stored to memory at: [ 1155.052072][T16471] __get_compat_msghdr+0x514/0x750 [ 1155.057415][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1155.062600][T16471] ___sys_recvmsg+0x19d/0x890 [ 1155.067449][T16471] do_recvmmsg+0x63a/0x10a0 [ 1155.072407][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.077243][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.083768][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1155.088966][T16471] do_fast_syscall_32+0x33/0x70 [ 1155.094099][T16471] do_SYSENTER_32+0x1b/0x20 [ 1155.098750][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.105424][T16471] [ 1155.107824][T16471] Uninit was stored to memory at: [ 1155.113210][T16471] __get_compat_msghdr+0x514/0x750 [ 1155.118532][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1155.123717][T16471] ___sys_recvmsg+0x19d/0x890 [ 1155.128556][T16471] do_recvmmsg+0x63a/0x10a0 [ 1155.133348][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.138184][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.144723][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1155.149915][T16471] do_fast_syscall_32+0x33/0x70 [ 1155.155306][T16471] do_SYSENTER_32+0x1b/0x20 [ 1155.159964][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.166642][T16471] [ 1155.169067][T16471] Uninit was stored to memory at: [ 1155.174428][T16471] __get_compat_msghdr+0x514/0x750 [ 1155.179743][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1155.184944][T16471] ___sys_recvmsg+0x19d/0x890 [ 1155.189783][T16471] do_recvmmsg+0x63a/0x10a0 09:44:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) 09:44:25 executing program 1: syz_usb_connect$uac1(0x0, 0xfc, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x5, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x1, 0x1, 0xb3}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x400, 0x2, "5def"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x1, "f0a160a15918"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x4, 0xf0, 0x3, 0x1f, 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x2, 0xa3, "3b5ce88ded"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0xff, 0x1}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x40, 0x6, 0x5, "803af65149a01b9d89"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x4, 0x3, "42c70e2e665391"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0xb2, "73441a210898fe28"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0xd9, 0x80, "cb", "e3a0e7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0xca, {0x7, 0x25, 0x1, 0x80, 0x7f, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x7fff, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x5, 0x3, {0x7, 0x25, 0x1, 0x84, 0xff, 0x1000}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xc0, 0x3, 0x20, 0x40, 0x6}, 0x3c, &(0x7f0000000180)={0x5, 0xf, 0x3c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x1, 0x80, 0x3f}, @generic={0x2c, 0x10, 0x0, "c410c9b72020384ed3dfcad31f55cf9edc542eb6fcdcd6c3ffda99df905f22ef621ca9c77354796a5e"}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40b}}, {0x37, &(0x7f00000002c0)=@string={0x37, 0x3, "03c76d2c6c3ab464d657b69dde00715c6a875decb411e01f84fe62af6693cf72205707835f043cc27cd946626bcc4531706e2bb06c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}]}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) [ 1155.194657][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.199489][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.206043][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1155.211260][T16471] do_fast_syscall_32+0x33/0x70 [ 1155.216392][T16471] do_SYSENTER_32+0x1b/0x20 [ 1155.221053][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.227736][T16471] [ 1155.230144][T16471] Uninit was stored to memory at: [ 1155.235517][T16471] __get_compat_msghdr+0x514/0x750 [ 1155.240836][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1155.246073][T16471] ___sys_recvmsg+0x19d/0x890 [ 1155.250923][T16471] do_recvmmsg+0x63a/0x10a0 [ 1155.255702][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.260552][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.267110][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1155.272417][T16471] do_fast_syscall_32+0x33/0x70 [ 1155.277434][T16471] do_SYSENTER_32+0x1b/0x20 [ 1155.282219][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.288789][T16471] [ 1155.291196][T16471] Local variable msg_sys created at: [ 1155.296712][T16471] do_recvmmsg+0x5f/0x10a0 [ 1155.301286][T16471] __sys_recvmmsg+0x113/0x450 [ 1155.636237][T16504] not chained 750000 origins [ 1155.641144][T16504] CPU: 1 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1155.651818][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1155.662087][T16504] Call Trace: [ 1155.665463][T16504] [ 1155.668488][T16504] dump_stack_lvl+0x1c8/0x256 [ 1155.673397][T16504] dump_stack+0x1a/0x1c [ 1155.677834][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1155.683744][T16504] ? propagate_entity_load_avg+0x81/0x1450 [ 1155.689767][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.695132][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1155.701129][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.706409][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1155.712398][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1155.717799][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.723075][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1155.729140][T16504] ? should_fail+0x3f/0x810 [ 1155.733806][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1155.739078][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.744356][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1155.750781][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.756091][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1155.762072][T16504] __msan_chain_origin+0xbd/0x140 [ 1155.767260][T16504] __get_compat_msghdr+0x514/0x750 [ 1155.772605][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1155.777649][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1155.782553][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1155.787376][T16504] ___sys_recvmsg+0x19d/0x890 [ 1155.792213][T16504] ? __schedule+0x1609/0x21d0 [ 1155.797047][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.802321][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1155.808311][T16504] ? __cond_resched+0x1f/0x40 [ 1155.813156][T16504] do_recvmmsg+0x63a/0x10a0 [ 1155.817843][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1155.824267][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1155.829170][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.835765][T16504] __sys_recvmmsg+0x113/0x450 [ 1155.840876][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1155.846163][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1155.852584][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1155.857754][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1155.863727][T16504] do_fast_syscall_32+0x33/0x70 [ 1155.868729][T16504] do_SYSENTER_32+0x1b/0x20 [ 1155.873376][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1155.879928][T16504] RIP: 0023:0xf7f0b549 [ 1155.884119][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1155.903904][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.912473][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1155.920578][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1155.928666][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.936758][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.944933][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.953053][T16504] [ 1155.962926][T16504] Uninit was stored to memory at: [ 1155.968213][T16504] __get_compat_msghdr+0x514/0x750 [ 1155.974641][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1155.979722][T16504] ___sys_recvmsg+0x19d/0x890 [ 1155.984881][T16504] do_recvmmsg+0x63a/0x10a0 [ 1155.989543][T16504] __sys_recvmmsg+0x113/0x450 [ 1155.994504][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.000921][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.006270][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.011283][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.016142][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.022828][T16504] [ 1156.025231][T16504] Uninit was stored to memory at: [ 1156.031004][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.036527][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.041593][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.046632][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.051296][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.056278][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.062863][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.068149][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.073352][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.078025][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.084712][T16504] [ 1156.087117][T16504] Uninit was stored to memory at: [ 1156.092553][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.097867][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.103040][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.107874][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.112719][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.117554][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.124185][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.129381][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.134584][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.139244][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.146002][T16504] [ 1156.148411][T16504] Uninit was stored to memory at: [ 1156.153853][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.159203][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.164465][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.169298][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.174146][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.178989][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.185617][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.190807][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.196010][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.200671][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.207507][T16504] [ 1156.209922][T16504] Uninit was stored to memory at: [ 1156.215287][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.220613][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.225795][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.230631][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.235418][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.240264][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.246838][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.252151][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.257176][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.261842][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.268530][T16504] [ 1156.270941][T16504] Uninit was stored to memory at: [ 1156.276321][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.281650][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.286828][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.291667][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.296467][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.301350][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.307966][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.313304][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.318513][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.323355][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.329930][T16504] [ 1156.332540][T16504] Uninit was stored to memory at: [ 1156.334346][ T3568] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1156.338772][T16504] __get_compat_msghdr+0x514/0x750 [ 1156.351849][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1156.357065][T16504] ___sys_recvmsg+0x19d/0x890 [ 1156.362019][T16504] do_recvmmsg+0x63a/0x10a0 [ 1156.366675][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.371520][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1156.378126][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1156.383450][T16504] do_fast_syscall_32+0x33/0x70 [ 1156.388466][T16504] do_SYSENTER_32+0x1b/0x20 [ 1156.393248][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1156.399815][T16504] [ 1156.402393][T16504] Local variable msg_sys created at: [ 1156.407773][T16504] do_recvmmsg+0x5f/0x10a0 [ 1156.412537][T16504] __sys_recvmmsg+0x113/0x450 [ 1156.582600][ T3568] usb 2-1: Using ep0 maxpacket: 16 09:44:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001940)={0x2c, &(0x7f0000001740)=ANY=[@ANYBLOB="0000290000002800256f205c489f9355b2b3839378a77a3d53ee76f3283b0172fc9ed0ec541b3aaaff577f01411e"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1156.783253][ T3568] usb 2-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 1156.794100][ T3568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1156.873750][T16504] not chained 760000 origins [ 1156.878584][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1156.889267][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1156.899449][T16504] Call Trace: [ 1156.902814][T16504] [ 1156.905834][T16504] dump_stack_lvl+0x1c8/0x256 [ 1156.910716][T16504] dump_stack+0x1a/0x1c [ 1156.915041][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1156.920934][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1156.927182][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1156.932470][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1156.938920][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1156.945163][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1156.951426][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1156.956722][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1156.963148][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1156.968663][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1156.974027][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1156.980021][T16504] ? should_fail+0x3f/0x810 [ 1156.984699][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1156.989975][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1156.995256][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1157.002281][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1157.007556][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1157.013556][T16504] __msan_chain_origin+0xbd/0x140 [ 1157.018763][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.024116][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.029159][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1157.034276][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1157.039127][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.043970][T16504] ? __schedule+0x1609/0x21d0 [ 1157.048824][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1157.054106][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1157.060092][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1157.065364][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1157.071369][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.076131][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1157.082558][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1157.087464][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.094056][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.098884][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1157.104182][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.110617][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.115789][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1157.121849][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.126850][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.131492][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.138031][T16504] RIP: 0023:0xf7f0b549 [ 1157.142216][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1157.162001][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1157.170658][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1157.178760][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1157.186851][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1157.194958][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.203140][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.211629][T16504] [ 1157.219213][T16504] Uninit was stored to memory at: [ 1157.224899][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.230229][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.235416][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.240258][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.245066][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.249910][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.256486][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.261684][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.266828][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.271596][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.278314][T16504] [ 1157.280749][T16504] Uninit was stored to memory at: [ 1157.287039][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.292552][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.297662][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.302682][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.307361][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.312339][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.318760][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.324115][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.329148][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.333950][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.340516][T16504] [ 1157.343155][T16504] Uninit was stored to memory at: [ 1157.348408][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.354044][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.359105][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.364075][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.369005][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.373989][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.380418][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.385845][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.390870][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.395680][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.402371][T16504] [ 1157.404775][T16504] Uninit was stored to memory at: [ 1157.410022][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.415490][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.420558][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.425536][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.430211][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.435201][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.441628][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.446946][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.452095][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.456763][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.463460][T16504] [ 1157.465894][T16504] Uninit was stored to memory at: [ 1157.471162][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.476651][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.481737][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.486715][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.491376][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.496374][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.502947][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.508253][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.513412][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.518103][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.525181][T16504] [ 1157.527590][T16504] Uninit was stored to memory at: [ 1157.533002][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.538331][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.543562][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.548412][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.553233][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.558091][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.564669][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.569872][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.575030][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.579704][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.586410][T16504] [ 1157.588823][T16504] Uninit was stored to memory at: [ 1157.594221][T16504] __get_compat_msghdr+0x514/0x750 [ 1157.599537][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1157.604790][T16504] ___sys_recvmsg+0x19d/0x890 [ 1157.609634][T16504] do_recvmmsg+0x63a/0x10a0 [ 1157.614433][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.619271][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1157.625846][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1157.631057][T16504] do_fast_syscall_32+0x33/0x70 [ 1157.636222][T16504] do_SYSENTER_32+0x1b/0x20 [ 1157.640898][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1157.647582][T16504] [ 1157.650081][T16504] Local variable msg_sys created at: [ 1157.655609][T16504] do_recvmmsg+0x5f/0x10a0 [ 1157.660180][T16504] __sys_recvmmsg+0x113/0x450 [ 1157.764544][ T3568] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1157.774277][ T3568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.783471][ T3568] usb 2-1: Product: ࠐ [ 1157.787868][ T3568] usb 2-1: Manufacturer: п [ 1157.792877][ T3568] usb 2-1: SerialNumber: Ћ [ 1158.040153][T16483] not chained 770000 origins [ 1158.045192][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1158.055909][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1158.066116][T16483] Call Trace: [ 1158.069502][T16483] [ 1158.072532][T16483] dump_stack_lvl+0x1c8/0x256 [ 1158.077433][T16483] dump_stack+0x1a/0x1c [ 1158.081786][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1158.087699][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1158.094138][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.099439][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1158.105879][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.111206][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.117229][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.122522][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.128522][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1158.133941][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.139242][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.145252][T16483] ? should_fail+0x3f/0x810 [ 1158.149938][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1158.155233][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.160553][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1158.167022][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.172316][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.178333][T16483] __msan_chain_origin+0xbd/0x140 [ 1158.183548][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.188911][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.194090][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1158.199117][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1158.203974][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.208854][T16483] ? __schedule+0x1609/0x21d0 [ 1158.213738][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.219078][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.225085][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.230387][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1158.236762][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.241460][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1158.248259][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1158.253189][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.259802][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.264656][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1158.269975][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.276421][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.281610][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1158.287624][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.292643][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.297308][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.303870][T16483] RIP: 0023:0xf7faf549 [ 1158.303884][ T3568] usb 2-1: 0:2 : does not exist [ 1158.312973][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1158.332779][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1158.341404][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1158.349527][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1158.357640][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.365758][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.373953][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.375661][ T3568] usb 2-1: USB disconnect, device number 11 [ 1158.382029][T16483] [ 1158.388558][T16483] Uninit was stored to memory at: [ 1158.397410][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.402844][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.407893][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.412844][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.417582][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.422533][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.429011][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.434402][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.439942][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.444721][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.451414][T16483] [ 1158.453927][T16483] Uninit was stored to memory at: [ 1158.459206][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.464647][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.469735][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.474681][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.479346][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.484297][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.490736][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.496058][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.501076][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.505860][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.512616][T16483] [ 1158.515023][T16483] Uninit was stored to memory at: [ 1158.520274][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.525719][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.530900][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.535879][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.540570][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.545560][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.552101][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.557307][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.562455][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.567124][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.573892][T16483] [ 1158.576307][T16483] Uninit was stored to memory at: [ 1158.581565][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.586999][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.592166][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.597010][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.601673][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.606630][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.613157][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.618346][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.623492][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.628169][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.634854][T16483] [ 1158.637358][T16483] Uninit was stored to memory at: [ 1158.642719][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.648046][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.653236][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.658079][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.662860][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.667800][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.674344][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.679543][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.685407][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.690336][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.697013][T16483] [ 1158.699429][T16483] Uninit was stored to memory at: [ 1158.704821][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.710164][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.715534][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.720390][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.725151][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.729988][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.736527][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.741723][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.746863][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.751622][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.758303][T16483] [ 1158.760714][T16483] Uninit was stored to memory at: [ 1158.766098][T16483] __get_compat_msghdr+0x514/0x750 [ 1158.771423][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1158.776606][T16483] ___sys_recvmsg+0x19d/0x890 [ 1158.781443][T16483] do_recvmmsg+0x63a/0x10a0 [ 1158.786215][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.791054][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1158.797942][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1158.803243][T16483] do_fast_syscall_32+0x33/0x70 [ 1158.808260][T16483] do_SYSENTER_32+0x1b/0x20 [ 1158.813340][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1158.820001][T16483] [ 1158.822528][T16483] Local variable msg_sys created at: [ 1158.827911][T16483] do_recvmmsg+0x5f/0x10a0 [ 1158.832591][T16483] __sys_recvmmsg+0x113/0x450 [ 1158.841403][T16210] udevd[16210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.932197][T15744] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1159.068617][T16492] not chained 780000 origins [ 1159.074481][T16492] CPU: 1 PID: 16492 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1159.085202][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1159.095665][T16492] Call Trace: [ 1159.099046][T16492] [ 1159.102078][T16492] dump_stack_lvl+0x1c8/0x256 [ 1159.106982][T16492] dump_stack+0x1a/0x1c [ 1159.111333][T16492] kmsan_internal_chain_origin+0x78/0x120 [ 1159.117242][T16492] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1159.123607][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.128907][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1159.135365][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.140698][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.146705][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.155921][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.162033][T16492] ? __get_compat_msghdr+0x5b/0x750 [ 1159.167564][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.173413][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.179450][T16492] ? should_fail+0x3f/0x810 [ 1159.184169][T16492] ? __stack_depot_save+0x21/0x4b0 [ 1159.189480][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.194792][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1159.201676][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.206983][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.213252][T16492] __msan_chain_origin+0xbd/0x140 [ 1159.218469][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.223830][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.228982][T16492] ? ___sys_recvmsg+0xa9/0x890 [ 1159.233936][T16492] ? do_recvmmsg+0x63a/0x10a0 [ 1159.239057][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.243911][T16492] ? __schedule+0x1609/0x21d0 [ 1159.248769][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.254075][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.260079][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.265502][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1159.271511][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.276204][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1159.282652][T16492] ? __sys_recvmmsg+0x52/0x450 [ 1159.287577][T16492] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.294190][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.299034][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1159.304348][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.310801][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.315993][T16492] ? exit_to_user_mode_prepare+0x119/0x220 [ 1159.321995][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.327031][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.331721][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.338303][T16492] RIP: 0023:0xf7fca549 [ 1159.342495][T16492] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1159.363007][T16492] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1159.371600][T16492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1159.379739][T16492] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1159.387866][T16492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1159.396014][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.404151][T16492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1159.412291][T16492] [ 1159.422206][T16492] Uninit was stored to memory at: [ 1159.427492][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.441173][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.446384][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.451224][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.456052][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.460940][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.467489][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.472801][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.477825][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.482606][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.489449][T16492] [ 1159.491861][T16492] Uninit was stored to memory at: [ 1159.497261][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.502800][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.507863][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.512836][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.517588][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.522964][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.529517][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.535259][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.540282][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.545071][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.551659][T16492] [ 1159.554171][T16492] Uninit was stored to memory at: [ 1159.559619][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.565087][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.571805][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.576861][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.582289][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.587179][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.593732][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.598939][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.604159][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.608847][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.615578][T16492] [ 1159.617990][T16492] Uninit was stored to memory at: [ 1159.623511][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.628930][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.634182][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.639022][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.643863][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.648708][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.655326][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.660533][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.665747][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.670420][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.677154][T16492] [ 1159.679566][T16492] Uninit was stored to memory at: [ 1159.685008][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.690334][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.695574][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.700591][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.705389][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.710228][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.716927][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.722228][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.727432][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.732269][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.739022][T16492] [ 1159.741432][T16492] Uninit was stored to memory at: [ 1159.746869][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.752309][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.757375][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.762423][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.767261][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.772260][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.778684][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.784156][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.789172][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.794012][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.800579][T16492] [ 1159.803166][T16492] Uninit was stored to memory at: [ 1159.808419][T16492] __get_compat_msghdr+0x514/0x750 [ 1159.813898][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1159.818973][T16492] ___sys_recvmsg+0x19d/0x890 [ 1159.823988][T16492] do_recvmmsg+0x63a/0x10a0 [ 1159.828665][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.833700][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1159.840128][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1159.845502][T16492] do_fast_syscall_32+0x33/0x70 [ 1159.850521][T16492] do_SYSENTER_32+0x1b/0x20 [ 1159.855383][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1159.862090][T16492] [ 1159.864497][T16492] Local variable msg_sys created at: [ 1159.869912][T16492] do_recvmmsg+0x5f/0x10a0 [ 1159.874659][T16492] __sys_recvmmsg+0x113/0x450 [ 1159.932508][T15744] usb 1-1: Using ep0 maxpacket: 16 [ 1160.016893][T16504] not chained 790000 origins [ 1160.021621][T16504] CPU: 1 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1160.032301][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1160.042525][T16504] Call Trace: [ 1160.045923][T16504] [ 1160.048952][T16504] dump_stack_lvl+0x1c8/0x256 [ 1160.053865][T16504] dump_stack+0x1a/0x1c [ 1160.058224][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1160.064150][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1160.070412][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.075692][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1160.082136][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.087431][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.093418][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.098718][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.104718][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1160.110114][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.115406][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.121415][T16504] ? should_fail+0x3f/0x810 [ 1160.126100][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1160.131391][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.136690][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1160.143563][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.148860][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.154871][T16504] __msan_chain_origin+0xbd/0x140 [ 1160.160085][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.165440][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.170766][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1160.175714][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1160.180561][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.185411][T16504] ? __schedule+0x1609/0x21d0 [ 1160.190258][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.195651][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.201651][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.207301][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1160.213320][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.218022][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1160.224473][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1160.229398][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.236012][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.240854][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1160.246192][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.252667][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.257862][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1160.263860][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.268885][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.273554][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.280115][T16504] RIP: 0023:0xf7f0b549 [ 1160.284306][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1160.304206][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1160.312800][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1160.320917][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1160.329044][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1160.337156][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.345271][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1160.353597][T16504] [ 1160.374348][T16504] Uninit was stored to memory at: [ 1160.379733][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.387876][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.393067][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.397910][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.402676][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.407533][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.414236][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.419424][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.424533][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.429189][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.435835][T16504] [ 1160.438239][T16504] Uninit was stored to memory at: [ 1160.443598][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.448925][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.454098][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.458938][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.463704][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.468538][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.475217][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.480420][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.485693][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.490446][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.497124][T16504] [ 1160.499531][T16504] Uninit was stored to memory at: [ 1160.504902][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.510230][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.515405][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.520247][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.525104][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.529946][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.536480][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.541682][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.546831][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.551508][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.558208][T16504] [ 1160.560646][T16504] Uninit was stored to memory at: [ 1160.566018][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.571374][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.576653][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.581490][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.586256][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.591096][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.597712][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.603015][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.608043][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.612912][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.619786][T16504] [ 1160.622484][T16504] Uninit was stored to memory at: [ 1160.627746][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.633257][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.638468][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.643506][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.648178][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.653209][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.659730][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.665106][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.670125][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.675052][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.681618][T16504] [ 1160.684222][T16504] Uninit was stored to memory at: [ 1160.689482][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.694914][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.699970][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.704928][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.709679][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.714625][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.721085][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.726389][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.731431][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.736463][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.743219][T16504] [ 1160.745729][T16504] Uninit was stored to memory at: [ 1160.750989][T16504] __get_compat_msghdr+0x514/0x750 [ 1160.756425][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1160.761484][T16504] ___sys_recvmsg+0x19d/0x890 [ 1160.766452][T16504] do_recvmmsg+0x63a/0x10a0 [ 1160.771115][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.776126][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1160.782687][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1160.787891][T16504] do_fast_syscall_32+0x33/0x70 [ 1160.793070][T16504] do_SYSENTER_32+0x1b/0x20 [ 1160.797752][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1160.804435][T16504] [ 1160.806840][T16504] Local variable msg_sys created at: [ 1160.812397][T16504] do_recvmmsg+0x5f/0x10a0 [ 1160.816981][T16504] __sys_recvmmsg+0x113/0x450 [ 1160.827382][T15744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.839429][T15744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.849603][T15744] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1160.862827][T15744] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1160.872314][T15744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.894333][T15744] usb 1-1: config 0 descriptor?? [ 1160.992627][T15744] usb 1-1: can't set config #0, error -71 [ 1161.019704][T16483] not chained 800000 origins [ 1161.031006][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1161.041721][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1161.052015][T16483] Call Trace: [ 1161.055400][T16483] [ 1161.058431][T16483] dump_stack_lvl+0x1c8/0x256 [ 1161.063328][T16483] dump_stack+0x1a/0x1c [ 1161.067696][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1161.073612][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1161.079876][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.085168][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1161.091634][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.096926][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.103015][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.108313][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.114414][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1161.119831][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.125135][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.131157][T16483] ? should_fail+0x3f/0x810 [ 1161.135856][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1161.141156][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.146539][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1161.152978][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.158272][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.164281][T16483] __msan_chain_origin+0xbd/0x140 [ 1161.169495][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.174861][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.179929][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1161.184860][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1161.189790][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.194654][T16483] ? __schedule+0x1609/0x21d0 [ 1161.199509][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.204804][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.210811][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.216135][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1161.222140][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.226825][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1161.233306][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1161.238222][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.244815][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.249643][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1161.254932][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.261359][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.266534][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1161.272507][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.277505][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.282150][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.288686][T16483] RIP: 0023:0xf7faf549 [ 1161.292869][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1161.312660][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1161.321230][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1161.329338][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1161.337443][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.345534][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.353737][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.361861][T16483] [ 1161.365664][T16483] Uninit was stored to memory at: [ 1161.370940][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.376381][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.382021][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.386860][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.391528][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.396479][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.403014][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.408204][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.413324][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.417980][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.424645][T16483] [ 1161.427047][T16483] Uninit was stored to memory at: [ 1161.432403][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.437741][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.442923][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.447761][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.452525][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.457365][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.463898][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.469088][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.474365][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.479025][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.485690][T16483] [ 1161.488100][T16483] Uninit was stored to memory at: [ 1161.493878][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.499371][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.504952][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.509790][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.514620][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.519621][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.526214][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.531396][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.536578][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.541237][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.547912][T16483] [ 1161.550323][T16483] Uninit was stored to memory at: [ 1161.555737][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.561078][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.566346][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.571182][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.576111][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.580946][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.587565][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.592864][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.597877][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.602690][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.609597][T16483] [ 1161.612260][T16483] Uninit was stored to memory at: [ 1161.617509][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.623008][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.628078][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.633102][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.637764][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.642768][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.649196][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.654563][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.659579][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.664670][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.671434][T16483] [ 1161.674019][T16483] Uninit was stored to memory at: [ 1161.679303][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.684798][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.689860][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.694871][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.699533][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.704566][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.710994][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.716356][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.721388][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.726240][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.732911][T16483] [ 1161.735316][T16483] Uninit was stored to memory at: [ 1161.740563][T16483] __get_compat_msghdr+0x514/0x750 [ 1161.746059][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1161.751129][T16483] ___sys_recvmsg+0x19d/0x890 [ 1161.756146][T16483] do_recvmmsg+0x63a/0x10a0 [ 1161.760812][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.765819][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1161.772343][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1161.777524][T16483] do_fast_syscall_32+0x33/0x70 [ 1161.782704][T16483] do_SYSENTER_32+0x1b/0x20 [ 1161.787378][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1161.794116][T16483] [ 1161.796529][T16483] Local variable msg_sys created at: [ 1161.802074][T16483] do_recvmmsg+0x5f/0x10a0 [ 1161.806661][T16483] __sys_recvmmsg+0x113/0x450 [ 1161.847523][T15744] usb 1-1: USB disconnect, device number 11 [ 1161.969558][T16492] not chained 810000 origins [ 1161.974463][T16492] CPU: 1 PID: 16492 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1161.985319][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1161.995512][T16492] Call Trace: [ 1161.998886][T16492] [ 1162.001941][T16492] dump_stack_lvl+0x1c8/0x256 [ 1162.006837][T16492] dump_stack+0x1a/0x1c [ 1162.011204][T16492] kmsan_internal_chain_origin+0x78/0x120 [ 1162.017165][T16492] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1162.023428][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.028715][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1162.035155][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.040446][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.046435][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.051724][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.057709][T16492] ? __get_compat_msghdr+0x5b/0x750 [ 1162.063109][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.068387][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.074375][T16492] ? should_fail+0x3f/0x810 [ 1162.079039][T16492] ? __stack_depot_save+0x21/0x4b0 [ 1162.084316][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.089676][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1162.096098][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.101370][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.107356][T16492] __msan_chain_origin+0xbd/0x140 [ 1162.112548][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.118156][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.123201][T16492] ? ___sys_recvmsg+0xa9/0x890 [ 1162.128111][T16492] ? do_recvmmsg+0x63a/0x10a0 [ 1162.132936][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.137769][T16492] ? __schedule+0x1609/0x21d0 [ 1162.142602][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.147879][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.153860][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.159137][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1162.165159][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.169831][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1162.176258][T16492] ? __sys_recvmmsg+0x52/0x450 [ 1162.181181][T16492] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.187857][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.192680][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1162.197968][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.204396][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.209572][T16492] ? exit_to_user_mode_prepare+0x119/0x220 [ 1162.215541][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.220544][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.225706][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.232334][T16492] RIP: 0023:0xf7fca549 [ 1162.236777][T16492] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1162.256555][T16492] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1162.265128][T16492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1162.273233][T16492] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1162.281322][T16492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.289412][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.297502][T16492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.305793][T16492] [ 1162.316026][T16492] Uninit was stored to memory at: [ 1162.321310][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.327326][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.332647][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.337542][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.342308][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.347174][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.353701][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.358901][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.364012][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.368701][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.375362][T16492] [ 1162.377786][T16492] Uninit was stored to memory at: [ 1162.383132][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.388452][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.393648][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.398495][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.403419][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.408436][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.414972][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.420161][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.425382][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.430052][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.436731][T16492] [ 1162.439141][T16492] Uninit was stored to memory at: [ 1162.444506][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.449837][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.454997][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.459857][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.464626][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.469476][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.475997][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.481186][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.486329][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.490993][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.497666][T16492] [ 1162.500067][T16492] Uninit was stored to memory at: [ 1162.505419][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.510740][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.515903][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.520775][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.525621][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.530544][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.537136][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.542431][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.547444][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.552339][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.558907][T16492] [ 1162.561315][T16492] Uninit was stored to memory at: [ 1162.566753][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.572164][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.577217][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.582733][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.587407][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.592437][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.598855][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.604165][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.609168][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.613917][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.620478][T16492] [ 1162.622985][T16492] Uninit was stored to memory at: [ 1162.628323][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.633746][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.638796][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.643730][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.648390][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.653333][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.659759][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.665068][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.670076][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.674830][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.681393][T16492] [ 1162.683979][T16492] Uninit was stored to memory at: [ 1162.689237][T16492] __get_compat_msghdr+0x514/0x750 [ 1162.694726][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1162.699862][T16492] ___sys_recvmsg+0x19d/0x890 [ 1162.704809][T16492] do_recvmmsg+0x63a/0x10a0 [ 1162.709482][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.714491][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1162.720911][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1162.727234][T16492] do_fast_syscall_32+0x33/0x70 [ 1162.732346][T16492] do_SYSENTER_32+0x1b/0x20 [ 1162.737021][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1162.743750][T16492] [ 1162.746186][T16492] Local variable msg_sys created at: [ 1162.751564][T16492] do_recvmmsg+0x5f/0x10a0 [ 1162.756307][T16492] __sys_recvmmsg+0x113/0x450 [ 1162.953472][T16483] not chained 820000 origins [ 1162.958200][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1162.968875][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1162.979070][T16483] Call Trace: [ 1162.982480][T16483] [ 1162.985505][T16483] dump_stack_lvl+0x1c8/0x256 [ 1162.990401][T16483] dump_stack+0x1a/0x1c [ 1162.994836][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1163.000742][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1163.007124][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.012418][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.018858][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.024163][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.030167][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.035456][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.041459][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1163.046870][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.052178][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.058270][T16483] ? should_fail+0x3f/0x810 [ 1163.063062][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1163.068518][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.073835][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.080277][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.085575][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.091604][T16483] __msan_chain_origin+0xbd/0x140 [ 1163.097000][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.102348][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.107412][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1163.112332][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1163.117175][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.122014][T16483] ? __schedule+0x1609/0x21d0 [ 1163.126860][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.132149][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.138230][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.143518][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.149518][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.154205][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.160647][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1163.165564][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.172173][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.177009][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1163.182407][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.188859][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.194044][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1163.200032][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.205046][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.209706][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.216263][T16483] RIP: 0023:0xf7faf549 [ 1163.220461][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1163.240360][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1163.248963][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1163.257092][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1163.265201][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.273299][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.281406][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.289550][T16483] [ 1163.299861][T16483] Uninit was stored to memory at: [ 1163.305771][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.311089][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.316261][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.321095][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.325875][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.330709][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.337234][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.342518][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.347524][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.352287][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.358860][T16483] [ 1163.361272][T16483] Uninit was stored to memory at: [ 1163.366732][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.372623][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.377702][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.382652][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.387314][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.392248][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.398762][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.404051][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.409088][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.413848][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.420405][T16483] [ 1163.422908][T16483] Uninit was stored to memory at: [ 1163.428157][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.433572][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.438620][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.443563][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.448217][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.453145][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.459650][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.464932][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.469938][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.474671][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.481234][T16483] [ 1163.483733][T16483] Uninit was stored to memory at: [ 1163.488983][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.494414][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.499472][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.504405][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.509062][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.514001][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.520429][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.525790][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.530797][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.535639][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.542298][T16483] [ 1163.544706][T16483] Uninit was stored to memory at: [ 1163.549972][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.555500][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.560563][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.565602][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.570264][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.575287][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.581704][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.587020][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.592188][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.596852][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.603581][T16483] [ 1163.605990][T16483] Uninit was stored to memory at: [ 1163.611243][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.616739][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.621792][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.626800][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.631475][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.636479][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.643009][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.648198][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.653377][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.658036][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.664769][T16483] [ 1163.667179][T16483] Uninit was stored to memory at: [ 1163.672635][T16483] __get_compat_msghdr+0x514/0x750 [ 1163.679778][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1163.685028][T16483] ___sys_recvmsg+0x19d/0x890 [ 1163.689868][T16483] do_recvmmsg+0x63a/0x10a0 [ 1163.694638][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.699472][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.706070][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1163.711256][T16483] do_fast_syscall_32+0x33/0x70 [ 1163.716433][T16483] do_SYSENTER_32+0x1b/0x20 [ 1163.721182][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1163.727921][T16483] [ 1163.730325][T16483] Local variable msg_sys created at: [ 1163.735905][T16483] do_recvmmsg+0x5f/0x10a0 [ 1163.740490][T16483] __sys_recvmmsg+0x113/0x450 [ 1163.773900][T16471] not chained 830000 origins [ 1163.778632][T16471] CPU: 0 PID: 16471 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1163.789568][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1163.799760][T16471] Call Trace: [ 1163.803140][T16471] [ 1163.806168][T16471] dump_stack_lvl+0x1c8/0x256 [ 1163.811064][T16471] dump_stack+0x1a/0x1c [ 1163.815435][T16471] kmsan_internal_chain_origin+0x78/0x120 [ 1163.821344][T16471] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1163.827609][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.832903][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.839341][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.844637][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.850644][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.855934][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.861924][T16471] ? __get_compat_msghdr+0x5b/0x750 [ 1163.867333][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.872634][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.878642][T16471] ? should_fail+0x3f/0x810 [ 1163.883327][T16471] ? __stack_depot_save+0x21/0x4b0 [ 1163.888620][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.893908][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.900335][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.905629][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.911628][T16471] __msan_chain_origin+0xbd/0x140 [ 1163.916836][T16471] __get_compat_msghdr+0x514/0x750 [ 1163.922231][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1163.927289][T16471] ? ___sys_recvmsg+0xa9/0x890 [ 1163.932210][T16471] ? do_recvmmsg+0x63a/0x10a0 [ 1163.937043][T16471] ___sys_recvmsg+0x19d/0x890 [ 1163.941890][T16471] ? __schedule+0x1609/0x21d0 [ 1163.946821][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.952114][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.958111][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1163.963399][T16471] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1163.969419][T16471] do_recvmmsg+0x63a/0x10a0 [ 1163.974113][T16471] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1163.980553][T16471] ? __sys_recvmmsg+0x52/0x450 [ 1163.985488][T16471] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1163.992096][T16471] __sys_recvmmsg+0x113/0x450 [ 1163.996928][T16471] ? kmsan_get_metadata+0x33/0x220 [ 1164.002236][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.008679][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.013864][T16471] ? exit_to_user_mode_prepare+0x119/0x220 [ 1164.019850][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.024859][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.029520][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.036078][T16471] RIP: 0023:0xf7fb7549 [ 1164.040266][T16471] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1164.052443][T16504] not chained 840000 origins [ 1164.059995][T16471] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1164.073212][T16471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1164.081312][T16471] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1164.089401][T16471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1164.097504][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.105603][T16471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.113735][T16471] [ 1164.116838][T16504] CPU: 1 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1164.126758][T16471] Uninit was stored to memory at: [ 1164.127453][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1164.134416][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.142739][T16504] Call Trace: [ 1164.142773][T16504] [ 1164.142803][T16504] dump_stack_lvl+0x1c8/0x256 [ 1164.147979][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.151286][T16504] dump_stack+0x1a/0x1c [ 1164.154333][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.158907][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1164.163873][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.167937][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1164.172731][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.178346][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.182968][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.189015][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1164.193812][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.198822][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.205192][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.211329][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.216470][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.221476][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.226441][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.232140][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.232270][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1164.236755][T16471] [ 1164.236773][T16471] Uninit was stored to memory at: [ 1164.241875][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.242000][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.248457][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.254147][T16504] ? should_fail+0x3f/0x810 [ 1164.254268][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1164.259549][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.261898][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.262021][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1164.267067][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.272190][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.272307][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.278114][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.283236][T16504] __msan_chain_origin+0xbd/0x140 [ 1164.283353][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.287862][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.293031][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.297978][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.303105][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1164.303199][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1164.309466][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.314158][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.314268][T16504] ? __schedule+0x1609/0x21d0 [ 1164.319382][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.325211][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.325331][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.329819][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.334854][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.334977][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1164.340082][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.344793][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.344919][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1164.349758][T16471] [ 1164.349778][T16471] Uninit was stored to memory at: [ 1164.356019][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1164.356116][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.361022][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.365587][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.365687][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1164.370724][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.375423][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.375561][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.380208][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.385069][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1164.385188][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.390301][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.396121][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.396219][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.400741][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.405861][T16504] RIP: 0023:0xf7f0b549 [ 1164.405926][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1164.411789][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.418126][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 [ 1164.422751][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.428879][T16504] ORIG_RAX: 0000000000000151 [ 1164.428915][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1164.431220][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.436253][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1164.436315][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1164.436373][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.441144][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.447567][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.447655][T16504] [ 1164.447799][T16504] Uninit was stored to memory at: [ 1164.453022][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.457704][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.462802][T16471] [ 1164.467640][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.473999][T16471] Uninit was stored to memory at: [ 1164.479013][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.483938][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.489597][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.494573][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.499063][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.503686][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.510007][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.514833][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.518906][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.538679][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.545030][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.551124][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.556257][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.560963][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.569042][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.574062][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.582121][T16504] [ 1164.582139][T16504] Uninit was stored to memory at: [ 1164.582296][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.590133][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.598261][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.602897][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.610876][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.614062][T16471] [ 1164.614084][T16471] Uninit was stored to memory at: [ 1164.619176][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.625765][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.630727][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.633181][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.638014][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.643159][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.647820][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.653056][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.657544][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.662512][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.667175][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.671855][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.678217][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.682839][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.687849][T16504] [ 1164.687868][T16504] Uninit was stored to memory at: [ 1164.688022][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.692649][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.697503][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.703862][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.708350][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.713495][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.719810][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.724782][T16471] [ 1164.727097][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.732239][T16471] Uninit was stored to memory at: [ 1164.737333][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.742092][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.746791][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.753238][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.757903][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.760239][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.765391][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.769915][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.775124][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.779830][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.784776][T16504] [ 1164.784794][T16504] Uninit was stored to memory at: [ 1164.784950][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.791053][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.795916][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.800974][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.805577][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.810455][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.815225][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.819758][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.826094][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.832560][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.837567][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.839904][T16471] [ 1164.839921][T16471] Uninit was stored to memory at: [ 1164.845023][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.850292][T16471] __get_compat_msghdr+0x514/0x750 [ 1164.855106][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.859989][T16471] get_compat_msghdr+0x8c/0x1c0 [ 1164.864595][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.869317][T16471] ___sys_recvmsg+0x19d/0x890 [ 1164.875835][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.880279][T16471] do_recvmmsg+0x63a/0x10a0 [ 1164.882708][T16504] [ 1164.882726][T16504] Uninit was stored to memory at: [ 1164.882881][T16504] __get_compat_msghdr+0x514/0x750 [ 1164.887412][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.892533][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1164.898804][T16471] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.904013][T16504] ___sys_recvmsg+0x19d/0x890 [ 1164.904114][T16504] do_recvmmsg+0x63a/0x10a0 [ 1164.909140][T16471] __do_fast_syscall_32+0x87/0xe0 [ 1164.914089][T16504] __sys_recvmmsg+0x113/0x450 [ 1164.918982][T16471] do_fast_syscall_32+0x33/0x70 [ 1164.923756][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1164.928284][T16471] do_SYSENTER_32+0x1b/0x20 [ 1164.932888][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1164.939247][T16471] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.944020][T16504] do_fast_syscall_32+0x33/0x70 [ 1164.946392][T16471] [ 1164.946413][T16471] Local variable msg_sys created at: [ 1164.951457][T16504] do_SYSENTER_32+0x1b/0x20 [ 1164.957123][T16471] do_recvmmsg+0x5f/0x10a0 [ 1164.963435][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1164.968309][T16471] __sys_recvmmsg+0x113/0x450 [ 1164.973432][T16504] [ 1164.973449][T16504] Uninit was stored to memory at: [ 1164.973607][T16504] __get_compat_msghdr+0x514/0x750 [ 1165.186984][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1165.192160][T16504] ___sys_recvmsg+0x19d/0x890 [ 1165.197006][T16504] do_recvmmsg+0x63a/0x10a0 [ 1165.201663][T16504] __sys_recvmmsg+0x113/0x450 [ 1165.206606][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1165.213140][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1165.218326][T16504] do_fast_syscall_32+0x33/0x70 [ 1165.223440][T16504] do_SYSENTER_32+0x1b/0x20 [ 1165.228095][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1165.234774][T16504] [ 1165.237178][T16504] Uninit was stored to memory at: [ 1165.242535][T16504] __get_compat_msghdr+0x514/0x750 [ 1165.247847][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1165.252996][T16504] ___sys_recvmsg+0x19d/0x890 [ 1165.257832][T16504] do_recvmmsg+0x63a/0x10a0 [ 1165.262590][T16504] __sys_recvmmsg+0x113/0x450 [ 1165.267424][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1165.273954][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1165.279137][T16504] do_fast_syscall_32+0x33/0x70 [ 1165.284265][T16504] do_SYSENTER_32+0x1b/0x20 [ 1165.288931][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1165.295588][T16504] [ 1165.297990][T16504] Local variable msg_sys created at: [ 1165.303470][T16504] do_recvmmsg+0x5f/0x10a0 [ 1165.308036][T16504] __sys_recvmmsg+0x113/0x450 [ 1165.705804][T16504] not chained 850000 origins [ 1165.710537][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1165.721229][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1165.731437][T16504] Call Trace: [ 1165.734818][T16504] [ 1165.737848][T16504] dump_stack_lvl+0x1c8/0x256 [ 1165.742751][T16504] dump_stack+0x1a/0x1c [ 1165.747100][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1165.753004][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1165.759265][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.764575][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1165.771019][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.776317][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.782329][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.787626][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.793635][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1165.799049][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.804345][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.810366][T16504] ? should_fail+0x3f/0x810 [ 1165.815063][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1165.820362][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.825654][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1165.832089][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.837392][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.843440][T16504] __msan_chain_origin+0xbd/0x140 [ 1165.848646][T16504] __get_compat_msghdr+0x514/0x750 [ 1165.853985][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1165.859026][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1165.863931][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1165.868776][T16504] ___sys_recvmsg+0x19d/0x890 [ 1165.873667][T16504] ? __schedule+0x1609/0x21d0 [ 1165.878616][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.883917][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.889973][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.895261][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1165.901254][T16504] do_recvmmsg+0x63a/0x10a0 [ 1165.905932][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1165.912455][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1165.917447][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1165.924042][T16504] __sys_recvmmsg+0x113/0x450 [ 1165.928894][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1165.934185][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1165.940612][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1165.945794][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1165.951764][T16504] do_fast_syscall_32+0x33/0x70 [ 1165.956767][T16504] do_SYSENTER_32+0x1b/0x20 [ 1165.961410][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1165.967950][T16504] RIP: 0023:0xf7f0b549 [ 1165.972137][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1165.991920][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1166.000493][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1166.008591][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1166.016677][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.024778][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.032866][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1166.040988][T16504] [ 1166.048185][T16504] Uninit was stored to memory at: [ 1166.054702][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.060028][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.065209][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.070042][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.074829][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.079665][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.086202][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.091393][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.096519][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.101176][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.107853][T16504] [ 1166.110265][T16504] Uninit was stored to memory at: [ 1166.115630][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.120947][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.126145][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.130995][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.135789][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.140830][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.147412][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.152749][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.157760][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.162545][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.169100][T16504] [ 1166.171504][T16504] Uninit was stored to memory at: [ 1166.176879][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.182329][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.187390][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.192340][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.197081][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.202035][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.208455][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.213776][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.218803][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.223580][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.230138][T16504] [ 1166.232664][T16504] Uninit was stored to memory at: [ 1166.237919][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.243357][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.248410][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.253364][T16504] do_recvmmsg+0x63a/0x10a0 09:44:36 executing program 5: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:44:36 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1166.258025][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.262975][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.269388][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.274713][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.279720][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.284522][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.291069][T16504] [ 1166.293591][T16504] Uninit was stored to memory at: [ 1166.298878][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.304326][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.309391][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.314562][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.319217][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.324204][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.330632][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.335948][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.340996][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.345787][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.352477][T16504] [ 1166.354881][T16504] Uninit was stored to memory at: [ 1166.360138][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.365582][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.370691][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.375665][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.380331][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.385325][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.391757][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.397108][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.402262][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.407364][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.414190][T16504] [ 1166.416597][T16504] Uninit was stored to memory at: [ 1166.421848][T16504] __get_compat_msghdr+0x514/0x750 [ 1166.427637][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1166.432829][T16504] ___sys_recvmsg+0x19d/0x890 [ 1166.437669][T16504] do_recvmmsg+0x63a/0x10a0 [ 1166.442443][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.447266][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.453836][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1166.459042][T16504] do_fast_syscall_32+0x33/0x70 [ 1166.464194][T16504] do_SYSENTER_32+0x1b/0x20 [ 1166.468852][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.475547][T16504] [ 1166.477953][T16504] Local variable msg_sys created at: [ 1166.483458][T16504] do_recvmmsg+0x5f/0x10a0 [ 1166.488028][T16504] __sys_recvmmsg+0x113/0x450 [ 1166.684144][T16492] not chained 860000 origins [ 1166.688970][T16492] CPU: 1 PID: 16492 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1166.699659][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1166.709957][T16492] Call Trace: [ 1166.713341][T16492] [ 1166.716570][T16492] dump_stack_lvl+0x1c8/0x256 [ 1166.721494][T16492] dump_stack+0x1a/0x1c [ 1166.725927][T16492] kmsan_internal_chain_origin+0x78/0x120 [ 1166.731834][T16492] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1166.738080][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.743372][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1166.749817][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.755105][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.761100][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.766391][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.772390][T16492] ? __get_compat_msghdr+0x5b/0x750 [ 1166.777808][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.783096][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.789196][T16492] ? should_fail+0x3f/0x810 [ 1166.793880][T16492] ? __stack_depot_save+0x21/0x4b0 [ 1166.799172][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.804464][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1166.810901][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.816189][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.822184][T16492] __msan_chain_origin+0xbd/0x140 [ 1166.827383][T16492] __get_compat_msghdr+0x514/0x750 [ 1166.832737][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1166.837818][T16492] ? ___sys_recvmsg+0xa9/0x890 [ 1166.842732][T16492] ? do_recvmmsg+0x63a/0x10a0 [ 1166.847561][T16492] ___sys_recvmsg+0x19d/0x890 [ 1166.852395][T16492] ? __schedule+0x1609/0x21d0 [ 1166.857233][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.862521][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.868513][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.873786][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1166.880118][T16492] do_recvmmsg+0x63a/0x10a0 [ 1166.884877][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1166.891302][T16492] ? __sys_recvmmsg+0x52/0x450 [ 1166.896210][T16492] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.902795][T16492] __sys_recvmmsg+0x113/0x450 [ 1166.907614][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1166.912897][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1166.919348][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1166.924525][T16492] ? exit_to_user_mode_prepare+0x119/0x220 [ 1166.930530][T16492] do_fast_syscall_32+0x33/0x70 [ 1166.935528][T16492] do_SYSENTER_32+0x1b/0x20 [ 1166.940171][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1166.946714][T16492] RIP: 0023:0xf7fca549 [ 1166.950892][T16492] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1166.970673][T16492] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1166.979245][T16492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1166.987344][T16492] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1166.995438][T16492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.003534][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.011623][T16492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.019743][T16492] [ 1167.029775][T16492] Uninit was stored to memory at: [ 1167.036399][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.041744][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.046896][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.051821][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.056590][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.061432][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.067974][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.073261][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.078268][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.083010][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.089567][T16492] [ 1167.092054][T16492] Uninit was stored to memory at: [ 1167.097307][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.102457][ T8542] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1167.110316][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.115482][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.120352][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.125246][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.130171][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.136697][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.141983][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.146989][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.151645][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.158318][T16492] [ 1167.160720][T16492] Uninit was stored to memory at: [ 1167.166069][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.171388][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.176560][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.181395][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.186154][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.190988][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.197523][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.202813][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.207852][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.212620][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.219185][T16492] [ 1167.221600][T16492] Uninit was stored to memory at: [ 1167.226961][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.232388][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.237462][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.242475][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.247143][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.252130][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.258640][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.263992][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.269015][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.273759][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.280310][T16492] [ 1167.282867][T16492] Uninit was stored to memory at: [ 1167.288123][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.293592][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.298646][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.303639][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.308299][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.313294][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.319722][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.325091][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.330111][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.334869][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.341434][T16492] [ 1167.342597][ T8542] usb 2-1: Using ep0 maxpacket: 16 [ 1167.343886][T16492] Uninit was stored to memory at: [ 1167.344056][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.359443][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.364602][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.369439][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.374191][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.379046][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.385620][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.390823][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.395935][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.400598][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.407253][T16492] [ 1167.409660][T16492] Uninit was stored to memory at: [ 1167.415092][T16492] __get_compat_msghdr+0x514/0x750 [ 1167.420406][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1167.425550][T16492] ___sys_recvmsg+0x19d/0x890 [ 1167.430385][T16492] do_recvmmsg+0x63a/0x10a0 [ 1167.435127][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.439955][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.446470][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1167.451778][T16492] do_fast_syscall_32+0x33/0x70 [ 1167.456888][T16492] do_SYSENTER_32+0x1b/0x20 [ 1167.461552][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.462698][ T8542] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1167.468223][T16492] [ 1167.479413][T16492] Local variable msg_sys created at: [ 1167.479975][ T8542] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1167.484825][T16492] do_recvmmsg+0x5f/0x10a0 [ 1167.484915][T16492] __sys_recvmmsg+0x113/0x450 [ 1167.504885][ T8542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.559376][T16504] not chained 870000 origins [ 1167.564367][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1167.575049][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1167.585251][T16504] Call Trace: [ 1167.588627][T16504] [ 1167.591660][T16504] dump_stack_lvl+0x1c8/0x256 [ 1167.596557][T16504] dump_stack+0x1a/0x1c [ 1167.600898][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1167.606806][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1167.613067][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.618358][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1167.624801][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.630118][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.636285][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.641560][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.647538][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1167.652932][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.658211][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.664203][T16504] ? should_fail+0x3f/0x810 [ 1167.668884][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1167.674161][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.679442][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1167.685875][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.691153][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.697132][T16504] __msan_chain_origin+0xbd/0x140 [ 1167.702317][T16504] __get_compat_msghdr+0x514/0x750 [ 1167.707650][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1167.712688][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1167.717592][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1167.722418][T16504] ___sys_recvmsg+0x19d/0x890 [ 1167.727253][T16504] ? __schedule+0x1609/0x21d0 [ 1167.732087][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.737362][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.743342][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.748723][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1167.754714][T16504] do_recvmmsg+0x63a/0x10a0 [ 1167.759388][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1167.765810][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1167.770805][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.777398][T16504] __sys_recvmmsg+0x113/0x450 [ 1167.782218][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1167.787501][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.793925][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1167.799111][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1167.805433][T16504] do_fast_syscall_32+0x33/0x70 [ 1167.810442][T16504] do_SYSENTER_32+0x1b/0x20 [ 1167.815090][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.821633][T16504] RIP: 0023:0xf7f0b549 [ 1167.825813][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1167.845603][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1167.854171][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1167.862270][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1167.870360][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.878453][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.886549][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.894664][T16504] [ 1167.902073][T16504] Uninit was stored to memory at: [ 1167.907358][T16504] __get_compat_msghdr+0x514/0x750 [ 1167.913167][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1167.918227][T16504] ___sys_recvmsg+0x19d/0x890 [ 1167.923192][T16504] do_recvmmsg+0x63a/0x10a0 [ 1167.927850][T16504] __sys_recvmmsg+0x113/0x450 [ 1167.932813][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1167.939235][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1167.944541][T16504] do_fast_syscall_32+0x33/0x70 [ 1167.949549][T16504] do_SYSENTER_32+0x1b/0x20 [ 1167.954331][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1167.960889][T16504] [ 1167.963423][T16504] Uninit was stored to memory at: [ 1167.968676][T16504] __get_compat_msghdr+0x514/0x750 [ 1167.974119][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1167.979184][T16504] ___sys_recvmsg+0x19d/0x890 [ 1167.984148][T16504] do_recvmmsg+0x63a/0x10a0 [ 1167.988888][T16504] __sys_recvmmsg+0x113/0x450 [ 1167.993846][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.000281][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.005585][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.010593][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.015727][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.022410][T16504] [ 1168.024810][T16504] Uninit was stored to memory at: [ 1168.030146][T16504] __get_compat_msghdr+0x514/0x750 [ 1168.035591][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1168.040656][T16504] ___sys_recvmsg+0x19d/0x890 [ 1168.045626][T16504] do_recvmmsg+0x63a/0x10a0 [ 1168.050291][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.055252][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.061678][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.067021][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.072149][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.076809][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.083495][T16504] [ 1168.085912][T16504] Uninit was stored to memory at: [ 1168.091162][T16504] __get_compat_msghdr+0x514/0x750 [ 1168.096606][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1168.101666][T16504] ___sys_recvmsg+0x19d/0x890 [ 1168.106694][T16504] do_recvmmsg+0x63a/0x10a0 [ 1168.111354][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.116379][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.122936][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.128138][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.133337][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.137990][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.144692][T16504] [ 1168.147099][T16504] Uninit was stored to memory at: [ 1168.152615][T16504] __get_compat_msghdr+0x514/0x750 [ 1168.157958][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1168.163138][T16504] ___sys_recvmsg+0x19d/0x890 [ 1168.167975][T16504] do_recvmmsg+0x63a/0x10a0 [ 1168.172822][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.177664][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.184375][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.189567][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.194772][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.199431][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.206142][T16504] [ 1168.208554][T16504] Uninit was stored to memory at: [ 1168.213992][T16504] __get_compat_msghdr+0x514/0x750 [ 1168.219328][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1168.224579][T16504] ___sys_recvmsg+0x19d/0x890 [ 1168.229430][T16504] do_recvmmsg+0x63a/0x10a0 [ 1168.234278][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.239113][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.245730][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.250923][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.256130][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.260808][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.267497][T16504] [ 1168.269925][T16504] Uninit was stored to memory at: [ 1168.275483][T16504] __get_compat_msghdr+0x514/0x750 [ 1168.280817][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1168.286004][T16504] ___sys_recvmsg+0x19d/0x890 [ 1168.290849][T16504] do_recvmmsg+0x63a/0x10a0 [ 1168.295625][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.300462][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.307015][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1168.312314][T16504] do_fast_syscall_32+0x33/0x70 [ 1168.317317][T16504] do_SYSENTER_32+0x1b/0x20 [ 1168.322086][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.328655][T16504] [ 1168.331058][T16504] Local variable msg_sys created at: [ 1168.336568][T16504] do_recvmmsg+0x5f/0x10a0 [ 1168.341133][T16504] __sys_recvmmsg+0x113/0x450 [ 1168.579472][ T8542] usb 2-1: string descriptor 0 read error: -22 [ 1168.586475][ T8542] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1168.595946][ T8542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.623223][T16483] not chained 880000 origins [ 1168.627947][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1168.638625][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1168.648823][T16483] Call Trace: [ 1168.652206][T16483] [ 1168.655231][T16483] dump_stack_lvl+0x1c8/0x256 [ 1168.660152][T16483] dump_stack+0x1a/0x1c [ 1168.664507][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1168.670415][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1168.676675][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.681967][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1168.688401][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.693701][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.699698][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.704987][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.710980][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1168.714129][ T8542] usb 2-1: 0:2 : does not exist [ 1168.716338][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.726480][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.732491][T16483] ? should_fail+0x3f/0x810 [ 1168.737176][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1168.742467][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.747759][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1168.754199][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.759485][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.765480][T16483] __msan_chain_origin+0xbd/0x140 [ 1168.770684][T16483] __get_compat_msghdr+0x514/0x750 [ 1168.776041][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1168.781103][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1168.786023][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1168.790862][T16483] ___sys_recvmsg+0x19d/0x890 [ 1168.795709][T16483] ? __schedule+0x1609/0x21d0 [ 1168.800556][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.806201][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.812216][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.817510][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1168.823520][T16483] do_recvmmsg+0x63a/0x10a0 [ 1168.828217][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1168.834670][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1168.839598][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.846209][T16483] __sys_recvmmsg+0x113/0x450 [ 1168.851057][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1168.856366][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1168.862831][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1168.868020][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1168.874016][T16483] do_fast_syscall_32+0x33/0x70 [ 1168.879046][T16483] do_SYSENTER_32+0x1b/0x20 [ 1168.883723][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1168.890284][T16483] RIP: 0023:0xf7faf549 [ 1168.894484][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1168.914293][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1168.922896][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1168.931021][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1168.939139][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1168.943433][ T3560] usb 2-1: USB disconnect, device number 12 [ 1168.947188][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.961252][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1168.969384][T16483] [ 1168.979731][T16483] Uninit was stored to memory at: [ 1168.985623][T16483] __get_compat_msghdr+0x514/0x750 [ 1168.991027][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1168.996240][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.001078][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.005900][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.010752][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.017268][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.022613][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.027651][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.032471][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.039041][T16483] [ 1169.041458][T16483] Uninit was stored to memory at: [ 1169.046811][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.052278][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.057336][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.062261][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.066914][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.071736][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.078247][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.083617][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.088632][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.093452][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.100021][T16483] [ 1169.102580][T16483] Uninit was stored to memory at: [ 1169.108179][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.113580][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.118629][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.123641][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.128315][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.133356][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.139784][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.145141][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.150165][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.154916][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.161485][T16483] [ 1169.164044][T16483] Uninit was stored to memory at: [ 1169.169314][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.170101][T16514] udevd[16514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1169.174678][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.174816][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.200730][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.205556][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.210396][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.216914][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.222201][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.227217][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.231962][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.238515][T16483] [ 1169.240918][T16483] Uninit was stored to memory at: [ 1169.246266][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.251588][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.256741][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.261570][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.266378][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.271301][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.277934][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.283198][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.288205][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.293002][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.299566][T16483] [ 1169.302205][T16483] Uninit was stored to memory at: [ 1169.307457][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.312929][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.317992][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.323074][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.327732][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.332722][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.339167][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.344523][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.349528][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.354353][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.360914][T16483] [ 1169.363499][T16483] Uninit was stored to memory at: [ 1169.368754][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.374239][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.379316][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.384340][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.389005][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.394028][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.400473][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.405833][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.410857][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.415684][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.422353][T16483] [ 1169.424784][T16483] Local variable msg_sys created at: [ 1169.430179][T16483] do_recvmmsg+0x5f/0x10a0 [ 1169.434911][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.590047][T16483] not chained 890000 origins [ 1169.594919][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1169.605604][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1169.615799][T16483] Call Trace: [ 1169.619179][T16483] [ 1169.622206][T16483] dump_stack_lvl+0x1c8/0x256 [ 1169.627101][T16483] dump_stack+0x1a/0x1c [ 1169.631458][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1169.637375][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1169.643653][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.648950][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1169.655507][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.660887][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.666917][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.672228][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.678243][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1169.683683][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.688979][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.694984][T16483] ? should_fail+0x3f/0x810 [ 1169.699765][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1169.705066][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.710363][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1169.716819][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.722122][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.728118][T16483] __msan_chain_origin+0xbd/0x140 [ 1169.733330][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.738686][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.743756][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1169.748680][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1169.753535][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.758385][T16483] ? __schedule+0x1609/0x21d0 [ 1169.763245][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.768539][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.774538][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.779846][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1169.785858][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.790548][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1169.797001][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1169.801926][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.808537][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.813386][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1169.818705][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.825156][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.830357][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1169.836359][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.841420][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.846087][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.852651][T16483] RIP: 0023:0xf7faf549 [ 1169.856858][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1169.876678][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1169.885253][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1169.893357][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1169.901497][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1169.909585][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.917682][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.925802][T16483] [ 1169.936741][T16483] Uninit was stored to memory at: [ 1169.942666][T16483] __get_compat_msghdr+0x514/0x750 [ 1169.948003][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1169.953176][T16483] ___sys_recvmsg+0x19d/0x890 [ 1169.958019][T16483] do_recvmmsg+0x63a/0x10a0 [ 1169.962771][T16483] __sys_recvmmsg+0x113/0x450 [ 1169.967607][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1169.974311][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1169.979505][T16483] do_fast_syscall_32+0x33/0x70 [ 1169.984617][T16483] do_SYSENTER_32+0x1b/0x20 [ 1169.989283][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1169.995967][T16483] [ 1169.998379][T16483] Uninit was stored to memory at: [ 1170.003732][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.009134][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.014293][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.019136][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.023899][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.028742][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.035269][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.040463][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.045588][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.050254][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.056933][T16483] [ 1170.059343][T16483] Uninit was stored to memory at: [ 1170.064691][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.070006][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.075160][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.079985][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.084742][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.089573][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.096090][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.101276][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.106383][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.111036][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.117726][T16483] [ 1170.120135][T16483] Uninit was stored to memory at: [ 1170.125469][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.130781][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.135940][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.140782][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.145624][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.150467][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.156987][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.162358][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.167377][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.172125][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.178691][T16483] [ 1170.181096][T16483] Uninit was stored to memory at: [ 1170.186456][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.191797][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.197473][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.202411][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.207071][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.211992][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.218422][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.223717][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.228751][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.233516][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.240097][T16483] [ 1170.242609][T16483] Uninit was stored to memory at: [ 1170.247877][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.253301][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.258441][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.263381][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.268128][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.273072][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.279500][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.284790][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.289798][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.294548][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.301106][T16483] [ 1170.303619][T16483] Uninit was stored to memory at: [ 1170.308885][T16483] __get_compat_msghdr+0x514/0x750 [ 1170.314369][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1170.319507][T16483] ___sys_recvmsg+0x19d/0x890 [ 1170.324460][T16483] do_recvmmsg+0x63a/0x10a0 [ 1170.329122][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.334120][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.340548][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1170.345920][T16483] do_fast_syscall_32+0x33/0x70 [ 1170.350978][T16483] do_SYSENTER_32+0x1b/0x20 [ 1170.355846][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.362520][T16483] [ 1170.364951][T16483] Local variable msg_sys created at: [ 1170.370345][T16483] do_recvmmsg+0x5f/0x10a0 [ 1170.375087][T16483] __sys_recvmmsg+0x113/0x450 [ 1170.629074][T16492] not chained 900000 origins [ 1170.634586][T16492] CPU: 1 PID: 16492 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1170.645277][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1170.655574][T16492] Call Trace: [ 1170.658963][T16492] [ 1170.661989][T16492] dump_stack_lvl+0x1c8/0x256 [ 1170.666889][T16492] dump_stack+0x1a/0x1c [ 1170.671331][T16492] kmsan_internal_chain_origin+0x78/0x120 [ 1170.677249][T16492] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1170.683519][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.688818][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1170.695276][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.700578][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.706585][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.711900][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.717909][T16492] ? __get_compat_msghdr+0x5b/0x750 [ 1170.723338][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.728685][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.734711][T16492] ? should_fail+0x3f/0x810 [ 1170.739403][T16492] ? __stack_depot_save+0x21/0x4b0 [ 1170.744691][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.750346][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1170.756804][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.762111][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.768114][T16492] __msan_chain_origin+0xbd/0x140 [ 1170.773326][T16492] __get_compat_msghdr+0x514/0x750 [ 1170.778701][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1170.783766][T16492] ? ___sys_recvmsg+0xa9/0x890 [ 1170.788716][T16492] ? do_recvmmsg+0x63a/0x10a0 [ 1170.793565][T16492] ___sys_recvmsg+0x19d/0x890 [ 1170.798417][T16492] ? __schedule+0x1609/0x21d0 [ 1170.803273][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.808570][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.814566][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.819867][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1170.825911][T16492] do_recvmmsg+0x63a/0x10a0 [ 1170.830604][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1170.837054][T16492] ? __sys_recvmmsg+0x52/0x450 [ 1170.841980][T16492] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.848587][T16492] __sys_recvmmsg+0x113/0x450 [ 1170.854380][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1170.859698][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1170.866157][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1170.871351][T16492] ? exit_to_user_mode_prepare+0x119/0x220 [ 1170.877344][T16492] do_fast_syscall_32+0x33/0x70 [ 1170.882456][T16492] do_SYSENTER_32+0x1b/0x20 [ 1170.887204][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1170.893939][T16492] RIP: 0023:0xf7fca549 [ 1170.898136][T16492] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1170.917960][T16492] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1170.926551][T16492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1170.934670][T16492] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1170.942796][T16492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.950907][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.959015][T16492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.967157][T16492] [ 1170.978273][T16492] Uninit was stored to memory at: [ 1170.984321][T16492] __get_compat_msghdr+0x514/0x750 [ 1170.989655][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1170.994892][T16492] ___sys_recvmsg+0x19d/0x890 [ 1170.999730][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.004493][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.009327][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.015846][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.021051][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.026155][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.030827][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.037579][T16492] [ 1171.039988][T16492] Uninit was stored to memory at: [ 1171.045349][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.050676][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.055827][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.060677][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.065516][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.070355][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.076885][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.082222][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.087234][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.092050][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.098604][T16492] [ 1171.101026][T16492] Uninit was stored to memory at: [ 1171.106440][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.111765][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.117066][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.122081][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.126768][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.131782][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.138494][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.143837][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.149025][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.153795][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.160365][T16492] [ 1171.162922][T16492] Uninit was stored to memory at: [ 1171.168272][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.173749][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.178810][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.183807][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.188472][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.193482][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.199912][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.205261][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.210277][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.215100][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.221675][T16492] [ 1171.224254][T16492] Uninit was stored to memory at: [ 1171.227639][T16519] not chained 910000 origins [ 1171.229477][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.234353][T16519] CPU: 0 PID: 16519 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1171.239290][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.249882][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1171.249937][T16519] Call Trace: [ 1171.249970][T16519] [ 1171.250001][T16519] dump_stack_lvl+0x1c8/0x256 [ 1171.254910][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.264915][T16519] dump_stack+0x1a/0x1c [ 1171.268293][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.271239][T16519] kmsan_internal_chain_origin+0x78/0x120 [ 1171.276029][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.280626][T16519] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1171.284863][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.289292][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.295124][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.299783][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1171.305928][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.312097][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.317278][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.322398][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.328717][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.333600][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.333718][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.338795][T16492] [ 1171.338815][T16492] Uninit was stored to memory at: [ 1171.343316][T16519] ? __get_compat_msghdr+0x5b/0x750 [ 1171.349367][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.355578][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.355708][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.360814][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.366662][T16519] ? should_fail+0x3f/0x810 [ 1171.366794][T16519] ? __stack_depot_save+0x21/0x4b0 [ 1171.369109][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.374145][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.374272][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1171.379434][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.384605][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.384734][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.389841][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.395668][T16519] __msan_chain_origin+0xbd/0x140 [ 1171.395789][T16519] __get_compat_msghdr+0x514/0x750 [ 1171.400667][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.405206][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1171.410380][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.415066][T16519] ? ___sys_recvmsg+0xa9/0x890 [ 1171.415163][T16519] ? do_recvmmsg+0x63a/0x10a0 [ 1171.420485][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.426740][T16519] ___sys_recvmsg+0x19d/0x890 [ 1171.426854][T16519] ? __schedule+0x1609/0x21d0 [ 1171.431325][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.436460][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.442445][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.447025][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.452126][T16492] [ 1171.457349][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.463688][T16492] Uninit was stored to memory at: [ 1171.468464][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1171.473701][T16492] __get_compat_msghdr+0x514/0x750 [ 1171.478267][T16519] do_recvmmsg+0x63a/0x10a0 [ 1171.483031][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1171.487835][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1171.492628][T16492] ___sys_recvmsg+0x19d/0x890 [ 1171.497205][T16519] ? __sys_recvmmsg+0x52/0x450 [ 1171.501696][T16492] do_recvmmsg+0x63a/0x10a0 [ 1171.506811][T16519] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.506939][T16519] __sys_recvmmsg+0x113/0x450 [ 1171.513305][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.519042][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1171.521374][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.526515][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.531608][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1171.537437][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1171.542719][T16492] do_fast_syscall_32+0x33/0x70 [ 1171.547118][T16519] ? exit_to_user_mode_prepare+0x119/0x220 [ 1171.552069][T16492] do_SYSENTER_32+0x1b/0x20 [ 1171.558235][T16519] do_fast_syscall_32+0x33/0x70 [ 1171.562989][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.567680][T16519] do_SYSENTER_32+0x1b/0x20 [ 1171.572265][T16492] [ 1171.578606][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.583379][T16492] Local variable msg_sys created at: [ 1171.587980][T16519] RIP: 0023:0xf7fb7549 [ 1171.593225][T16492] do_recvmmsg+0x5f/0x10a0 [ 1171.599810][T16519] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1171.606156][T16492] __sys_recvmmsg+0x113/0x450 [ 1171.611084][T16519] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1171.707031][T16519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1171.715149][T16519] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1171.723254][T16519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1171.731366][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.739473][T16519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1171.747602][T16519] [ 1171.754810][T16519] Uninit was stored to memory at: [ 1171.760085][T16519] __get_compat_msghdr+0x514/0x750 [ 1171.766462][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1171.771532][T16519] ___sys_recvmsg+0x19d/0x890 [ 1171.776540][T16519] do_recvmmsg+0x63a/0x10a0 [ 1171.781198][T16519] __sys_recvmmsg+0x113/0x450 [ 1171.786160][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.792730][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1171.797918][T16519] do_fast_syscall_32+0x33/0x70 [ 1171.803045][T16519] do_SYSENTER_32+0x1b/0x20 [ 1171.807701][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.814380][T16519] [ 1171.816785][T16519] Uninit was stored to memory at: [ 1171.822130][T16519] __get_compat_msghdr+0x514/0x750 [ 1171.827450][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1171.832730][T16519] ___sys_recvmsg+0x19d/0x890 [ 1171.837587][T16519] do_recvmmsg+0x63a/0x10a0 [ 1171.842349][T16519] __sys_recvmmsg+0x113/0x450 [ 1171.847194][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.854005][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1171.859192][T16519] do_fast_syscall_32+0x33/0x70 [ 1171.864317][T16519] do_SYSENTER_32+0x1b/0x20 [ 1171.868977][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.875664][T16519] [ 1171.878066][T16519] Uninit was stored to memory at: [ 1171.883438][T16519] __get_compat_msghdr+0x514/0x750 [ 1171.888762][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1171.894132][T16519] ___sys_recvmsg+0x19d/0x890 [ 1171.898986][T16519] do_recvmmsg+0x63a/0x10a0 [ 1171.903762][T16519] __sys_recvmmsg+0x113/0x450 [ 1171.908607][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.915187][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1171.920474][T16519] do_fast_syscall_32+0x33/0x70 [ 1171.925602][T16519] do_SYSENTER_32+0x1b/0x20 [ 1171.930257][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1171.936951][T16519] [ 1171.939355][T16519] Uninit was stored to memory at: [ 1171.944728][T16519] __get_compat_msghdr+0x514/0x750 [ 1171.950043][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1171.955735][T16519] ___sys_recvmsg+0x19d/0x890 [ 1171.960118][T16492] not chained 920000 origins [ 1171.960517][T16519] do_recvmmsg+0x63a/0x10a0 [ 1171.965405][T16492] CPU: 1 PID: 16492 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1171.969731][T16519] __sys_recvmmsg+0x113/0x450 [ 1171.980237][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1171.980294][T16492] Call Trace: [ 1171.980326][T16492] [ 1171.980358][T16492] dump_stack_lvl+0x1c8/0x256 [ 1171.985121][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1171.995123][T16492] dump_stack+0x1a/0x1c [ 1171.998510][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1172.001456][T16492] kmsan_internal_chain_origin+0x78/0x120 [ 1172.006259][T16519] do_fast_syscall_32+0x33/0x70 [ 1172.012396][T16492] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1172.012523][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.016760][T16519] do_SYSENTER_32+0x1b/0x20 [ 1172.021813][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1172.027674][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.032445][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.032566][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.038630][T16519] [ 1172.038649][T16519] Uninit was stored to memory at: [ 1172.043764][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.043888][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.048529][T16519] __get_compat_msghdr+0x514/0x750 [ 1172.054640][T16492] ? __get_compat_msghdr+0x5b/0x750 [ 1172.054788][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.061084][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1172.066214][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.066350][T16492] ? should_fail+0x3f/0x810 [ 1172.072680][T16519] ___sys_recvmsg+0x19d/0x890 [ 1172.074912][T16492] ? __stack_depot_save+0x21/0x4b0 [ 1172.079949][T16519] do_recvmmsg+0x63a/0x10a0 [ 1172.085071][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.085190][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1172.090989][T16519] __sys_recvmmsg+0x113/0x450 [ 1172.096114][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.096231][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.101415][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.106551][T16492] __msan_chain_origin+0xbd/0x140 [ 1172.106669][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.111531][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1172.117371][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.122066][T16519] do_fast_syscall_32+0x33/0x70 [ 1172.126672][T16492] ? ___sys_recvmsg+0xa9/0x890 [ 1172.131798][T16519] do_SYSENTER_32+0x1b/0x20 [ 1172.136319][T16492] ? do_recvmmsg+0x63a/0x10a0 [ 1172.141609][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.147866][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.147982][T16492] ? __schedule+0x1609/0x21d0 [ 1172.152943][T16519] [ 1172.157968][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.163870][T16519] Uninit was stored to memory at: [ 1172.170010][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.175280][T16519] __get_compat_msghdr+0x514/0x750 [ 1172.180153][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.185286][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1172.190036][T16492] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1172.194992][T16519] ___sys_recvmsg+0x19d/0x890 [ 1172.199665][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.204277][T16519] do_recvmmsg+0x63a/0x10a0 [ 1172.208884][T16492] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1172.215294][T16519] __sys_recvmmsg+0x113/0x450 [ 1172.220058][T16492] ? __sys_recvmmsg+0x52/0x450 [ 1172.224829][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.227072][T16492] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.232293][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1172.237236][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.243140][T16519] do_fast_syscall_32+0x33/0x70 [ 1172.248158][T16492] ? kmsan_get_metadata+0x33/0x220 [ 1172.253389][T16519] do_SYSENTER_32+0x1b/0x20 [ 1172.258162][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.264078][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.268682][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.273276][T16519] [ 1172.277689][T16492] ? exit_to_user_mode_prepare+0x119/0x220 [ 1172.284039][T16519] Uninit was stored to memory at: [ 1172.288666][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.293669][T16519] __get_compat_msghdr+0x514/0x750 [ 1172.299767][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.306390][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1172.311400][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.316466][T16519] ___sys_recvmsg+0x19d/0x890 [ 1172.321201][T16492] RIP: 0023:0xf7fca549 [ 1172.326438][T16519] do_recvmmsg+0x63a/0x10a0 [ 1172.330837][T16492] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1172.337188][T16519] __sys_recvmmsg+0x113/0x450 [ 1172.343424][T16492] RSP: 002b:00000000f7f835cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1172.343520][T16492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1172.348560][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.351069][T16492] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1172.356989][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1172.361913][T16492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.361974][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.362036][T16492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1172.366870][T16519] do_fast_syscall_32+0x33/0x70 [ 1172.372016][T16492] [ 1172.378694][T16492] Uninit was stored to memory at: [ 1172.381516][T16519] do_SYSENTER_32+0x1b/0x20 [ 1172.395333][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.396909][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.401416][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.421163][T16519] [ 1172.421184][T16519] Local variable msg_sys created at: [ 1172.421216][T16519] do_recvmmsg+0x5f/0x10a0 [ 1172.421301][T16519] __sys_recvmmsg+0x113/0x450 [ 1172.545300][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.550148][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.554942][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.559787][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.566316][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.571510][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.576629][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.581289][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.588035][T16492] [ 1172.590441][T16492] Uninit was stored to memory at: [ 1172.595799][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.601117][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.606445][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.611288][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.616043][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.620874][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.627400][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.632806][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.637823][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.642576][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.649134][T16492] [ 1172.651537][T16492] Uninit was stored to memory at: [ 1172.656895][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.662306][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.667362][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.672297][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.677059][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.681982][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.688393][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.693768][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.698775][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.703532][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.710081][T16492] [ 1172.712581][T16492] Uninit was stored to memory at: [ 1172.717826][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.723234][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.728294][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.733230][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.737882][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.742896][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.749323][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.754613][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.759615][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.764373][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.770937][T16492] [ 1172.773445][T16492] Uninit was stored to memory at: [ 1172.778693][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.784113][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.789177][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.794104][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.798754][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.803672][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.810092][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.815378][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.820388][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.825142][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.831711][T16492] [ 1172.834213][T16492] Uninit was stored to memory at: [ 1172.839490][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.844901][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.849953][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.854879][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.859532][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.864462][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.870976][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.876259][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.881276][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.886098][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.892848][T16492] [ 1172.895251][T16492] Uninit was stored to memory at: [ 1172.900501][T16492] __get_compat_msghdr+0x514/0x750 [ 1172.905982][T16492] get_compat_msghdr+0x8c/0x1c0 [ 1172.911039][T16492] ___sys_recvmsg+0x19d/0x890 [ 1172.916037][T16492] do_recvmmsg+0x63a/0x10a0 [ 1172.920694][T16492] __sys_recvmmsg+0x113/0x450 [ 1172.925688][T16492] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1172.932207][T16492] __do_fast_syscall_32+0x87/0xe0 [ 1172.937393][T16492] do_fast_syscall_32+0x33/0x70 [ 1172.942551][T16492] do_SYSENTER_32+0x1b/0x20 [ 1172.947209][T16492] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1172.953941][T16492] [ 1172.956348][T16492] Local variable msg_sys created at: [ 1172.961730][T16492] do_recvmmsg+0x5f/0x10a0 [ 1172.966569][T16492] __sys_recvmmsg+0x113/0x450 [ 1173.102268][T16519] not chained 930000 origins [ 1173.113571][T16519] CPU: 1 PID: 16519 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1173.124263][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1173.134544][T16519] Call Trace: [ 1173.137922][T16519] [ 1173.141474][T16519] dump_stack_lvl+0x1c8/0x256 [ 1173.146371][T16519] dump_stack+0x1a/0x1c [ 1173.150719][T16519] kmsan_internal_chain_origin+0x78/0x120 [ 1173.156622][T16519] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1173.162888][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.168268][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.174970][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.180262][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.186268][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.191570][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.197567][T16519] ? __get_compat_msghdr+0x5b/0x750 [ 1173.202982][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.208280][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.214297][T16519] ? should_fail+0x3f/0x810 [ 1173.218991][T16519] ? __stack_depot_save+0x21/0x4b0 [ 1173.224284][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.229587][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.236027][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.241323][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.247348][T16519] __msan_chain_origin+0xbd/0x140 [ 1173.252563][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.257923][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.262987][T16519] ? ___sys_recvmsg+0xa9/0x890 [ 1173.267912][T16519] ? do_recvmmsg+0x63a/0x10a0 [ 1173.272763][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.277608][T16519] ? __schedule+0x1609/0x21d0 [ 1173.282474][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.287767][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.293769][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.299081][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.305088][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.309778][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.316227][T16519] ? __sys_recvmmsg+0x52/0x450 [ 1173.321162][T16519] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.327778][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.332616][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1173.337953][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.344410][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.349622][T16519] ? exit_to_user_mode_prepare+0x119/0x220 [ 1173.355614][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.360632][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.365300][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.371856][T16519] RIP: 0023:0xf7fb7549 [ 1173.376045][T16519] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1173.395865][T16519] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1173.404548][T16519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1173.412662][T16519] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1173.420772][T16519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1173.428970][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.437076][T16519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1173.445309][T16519] [ 1173.449488][T16519] Uninit was stored to memory at: [ 1173.456393][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.461730][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.466913][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.472207][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.476869][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.481798][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.488323][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.493617][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.498718][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.503489][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.510052][T16519] [ 1173.512545][T16519] Uninit was stored to memory at: [ 1173.517796][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.523222][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.528277][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.533307][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.537973][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.542926][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.549366][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.554664][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.559673][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.564434][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.570993][T16519] [ 1173.573521][T16519] Uninit was stored to memory at: [ 1173.578776][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.584225][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.589278][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.594273][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.598937][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.603932][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.610380][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.615758][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.620772][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.625548][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.632245][T16519] [ 1173.634661][T16519] Uninit was stored to memory at: [ 1173.639922][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.645432][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.650483][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.655514][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.660180][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.665177][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.671603][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.676973][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.679146][T16504] not chained 940000 origins [ 1173.682023][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.686651][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1173.691156][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.701662][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1173.701717][T16504] Call Trace: [ 1173.701746][T16504] [ 1173.701777][T16504] dump_stack_lvl+0x1c8/0x256 [ 1173.701930][T16504] dump_stack+0x1a/0x1c [ 1173.708339][T16519] [ 1173.708359][T16519] Uninit was stored to memory at: [ 1173.718414][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1173.722060][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.724734][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1173.729415][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.733672][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.736090][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.741126][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.746970][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.751976][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.758160][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.763023][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.768223][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.772912][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.773032][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.779242][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.783751][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1173.788965][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.793737][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.793853][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.799669][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.805929][T16504] ? should_fail+0x3f/0x810 [ 1173.811119][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.816936][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1173.817052][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.822128][T16519] [ 1173.827295][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.832259][T16519] Uninit was stored to memory at: [ 1173.837304][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.843356][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.847624][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.852228][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.858485][T16504] __msan_chain_origin+0xbd/0x140 [ 1173.863711][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.868843][T16504] __get_compat_msghdr+0x514/0x750 [ 1173.871212][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.877463][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1173.882632][T16519] __sys_recvmmsg+0x113/0x450 [ 1173.887679][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1173.892997][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1173.898696][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1173.903639][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1173.908684][T16504] ___sys_recvmsg+0x19d/0x890 [ 1173.913441][T16519] do_fast_syscall_32+0x33/0x70 [ 1173.918503][T16504] ? __schedule+0x1609/0x21d0 [ 1173.923077][T16519] do_SYSENTER_32+0x1b/0x20 [ 1173.927868][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.932619][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1173.937306][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.943679][T16519] [ 1173.948253][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1173.953361][T16519] Uninit was stored to memory at: [ 1173.958129][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1173.963199][T16519] __get_compat_msghdr+0x514/0x750 [ 1173.967692][T16504] do_recvmmsg+0x63a/0x10a0 [ 1173.972270][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1173.977348][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1173.983779][T16519] ___sys_recvmsg+0x19d/0x890 [ 1173.989489][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1173.991809][T16519] do_recvmmsg+0x63a/0x10a0 [ 1173.996923][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.002038][T16519] __sys_recvmmsg+0x113/0x450 [ 1174.007780][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.012972][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.017395][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.022331][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1174.028513][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.033264][T16519] do_fast_syscall_32+0x33/0x70 [ 1174.037974][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.042674][T16519] do_SYSENTER_32+0x1b/0x20 [ 1174.049057][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1174.053825][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.058510][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.064844][T16519] [ 1174.069876][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.074987][T16519] Local variable msg_sys created at: [ 1174.081161][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.086100][T16519] do_recvmmsg+0x5f/0x10a0 [ 1174.091040][T16504] RIP: 0023:0xf7f0b549 [ 1174.095663][T16519] __sys_recvmmsg+0x113/0x450 [ 1174.101366][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1174.167781][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1174.176471][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1174.184597][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1174.192800][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.200904][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.209013][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.217146][T16504] [ 1174.224264][T16504] Uninit was stored to memory at: [ 1174.229551][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.238749][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.244214][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.249058][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.253850][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.258705][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.265327][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.270522][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.275725][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.280407][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.287158][T16504] [ 1174.289588][T16504] Uninit was stored to memory at: [ 1174.295017][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.300338][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.305595][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.310435][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.315278][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.320111][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.326744][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.332291][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.337311][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.342162][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.348742][T16504] [ 1174.351143][T16504] Uninit was stored to memory at: [ 1174.356609][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.362328][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.367399][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.372477][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.377148][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.382163][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.388590][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.393979][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.398999][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.403862][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.410457][T16504] [ 1174.413063][T16504] Uninit was stored to memory at: [ 1174.418313][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.423915][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.429020][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.434058][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.438718][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.443680][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.450127][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.455525][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.460538][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.465328][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.471998][T16504] [ 1174.474408][T16504] Uninit was stored to memory at: [ 1174.479692][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.485222][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.490285][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.495348][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.500441][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.505488][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.512038][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.517229][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.522524][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.527196][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.533988][T16504] [ 1174.536393][T16504] Uninit was stored to memory at: [ 1174.541675][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.547215][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.552487][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.557327][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.562172][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.567012][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.573641][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.578940][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.584178][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.588844][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.595521][T16504] [ 1174.597927][T16504] Uninit was stored to memory at: [ 1174.603296][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.608611][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.613885][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.618851][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.623724][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.628557][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.635181][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.640374][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.645597][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.650262][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.657036][T16504] [ 1174.659442][T16504] Local variable msg_sys created at: [ 1174.665016][T16504] do_recvmmsg+0x5f/0x10a0 [ 1174.669580][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.697857][T16504] not chained 950000 origins [ 1174.702877][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1174.713563][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1174.723759][T16504] Call Trace: [ 1174.727141][T16504] [ 1174.730161][T16504] dump_stack_lvl+0x1c8/0x256 [ 1174.735043][T16504] dump_stack+0x1a/0x1c [ 1174.739371][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1174.745270][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1174.751518][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.756811][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1174.763240][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.768514][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.774492][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.779850][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.785833][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1174.791230][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.796500][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.802491][T16504] ? should_fail+0x3f/0x810 [ 1174.807158][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1174.812429][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.817710][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1174.824135][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.829418][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.835397][T16504] __msan_chain_origin+0xbd/0x140 [ 1174.840583][T16504] __get_compat_msghdr+0x514/0x750 [ 1174.845919][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1174.850980][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1174.855883][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1174.860709][T16504] ___sys_recvmsg+0x19d/0x890 [ 1174.865569][T16504] ? __schedule+0x1609/0x21d0 [ 1174.870404][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.875678][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.881669][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.886960][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1174.892964][T16504] do_recvmmsg+0x63a/0x10a0 [ 1174.897637][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1174.904057][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1174.908975][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.915564][T16504] __sys_recvmmsg+0x113/0x450 [ 1174.920379][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1174.925675][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1174.932096][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1174.937358][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1174.943330][T16504] do_fast_syscall_32+0x33/0x70 [ 1174.948327][T16504] do_SYSENTER_32+0x1b/0x20 [ 1174.952971][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1174.959508][T16504] RIP: 0023:0xf7f0b549 [ 1174.963772][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1174.983564][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1174.992132][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1175.000232][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1175.008322][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.016677][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.024893][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.033142][T16504] [ 1175.047085][T16504] Uninit was stored to memory at: [ 1175.058835][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.066074][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.071407][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.076376][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.081212][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.086172][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.092708][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.098067][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.103193][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.107848][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.114545][T16504] [ 1175.116983][T16504] Uninit was stored to memory at: [ 1175.122407][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.127737][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.132926][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.137772][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.142566][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.147414][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.153964][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.159158][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.164290][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.168951][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.175623][T16504] [ 1175.178030][T16504] Uninit was stored to memory at: [ 1175.183495][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.188813][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.194057][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.198895][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.203744][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.208674][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.215288][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.220481][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.225774][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.230607][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.237361][T16504] [ 1175.239777][T16504] Uninit was stored to memory at: [ 1175.245221][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.250573][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.255859][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.260694][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.265545][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.270384][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.276994][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.282480][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.287579][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.292453][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.299031][T16504] [ 1175.301441][T16504] Uninit was stored to memory at: [ 1175.306886][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.312326][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.317408][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.322428][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.327176][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.332181][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.338698][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.344180][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.349240][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.354092][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.360655][T16504] [ 1175.363327][T16504] Uninit was stored to memory at: [ 1175.368597][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.374115][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.379176][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.384220][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.388906][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.393960][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.400560][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.406076][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.411115][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.416069][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.422755][T16504] [ 1175.425163][T16504] Uninit was stored to memory at: [ 1175.430420][T16504] __get_compat_msghdr+0x514/0x750 [ 1175.435937][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1175.441002][T16504] ___sys_recvmsg+0x19d/0x890 [ 1175.446044][T16504] do_recvmmsg+0x63a/0x10a0 [ 1175.451222][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.456509][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.463142][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1175.468337][T16504] do_fast_syscall_32+0x33/0x70 [ 1175.473553][T16504] do_SYSENTER_32+0x1b/0x20 [ 1175.478304][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.485268][T16504] [ 1175.487773][T16504] Local variable msg_sys created at: [ 1175.493428][T16504] do_recvmmsg+0x5f/0x10a0 [ 1175.497998][T16504] __sys_recvmmsg+0x113/0x450 [ 1175.534524][T16483] not chained 960000 origins [ 1175.539260][T16483] CPU: 0 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1175.549942][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1175.560132][T16483] Call Trace: [ 1175.563551][T16483] [ 1175.566672][T16483] dump_stack_lvl+0x1c8/0x256 [ 1175.571664][T16483] dump_stack+0x1a/0x1c [ 1175.576021][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1175.581937][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1175.588198][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.593496][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1175.600122][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.605780][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.611785][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.617070][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.623069][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1175.628482][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.633905][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.639923][T16483] ? should_fail+0x3f/0x810 [ 1175.644608][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1175.649899][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.655197][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1175.661724][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.667031][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.673210][T16483] __msan_chain_origin+0xbd/0x140 [ 1175.678678][T16483] __get_compat_msghdr+0x514/0x750 [ 1175.684043][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1175.689116][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1175.694119][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1175.699304][T16483] ___sys_recvmsg+0x19d/0x890 [ 1175.704161][T16483] ? __schedule+0x1609/0x21d0 [ 1175.709009][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.714306][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.720307][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.725598][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1175.731607][T16483] do_recvmmsg+0x63a/0x10a0 [ 1175.736292][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1175.742738][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1175.747660][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.754266][T16483] __sys_recvmmsg+0x113/0x450 [ 1175.759099][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1175.764405][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.770854][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1175.776068][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1175.782057][T16483] do_fast_syscall_32+0x33/0x70 [ 1175.787332][T16483] do_SYSENTER_32+0x1b/0x20 [ 1175.791991][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.798542][T16483] RIP: 0023:0xf7faf549 [ 1175.802829][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1175.823004][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1175.831959][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1175.840074][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1175.848310][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.856761][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.864863][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.873089][T16483] [ 1175.880118][T16483] Uninit was stored to memory at: [ 1175.885790][T16483] __get_compat_msghdr+0x514/0x750 [ 1175.891124][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1175.896393][T16483] ___sys_recvmsg+0x19d/0x890 [ 1175.901224][T16483] do_recvmmsg+0x63a/0x10a0 [ 1175.906016][T16483] __sys_recvmmsg+0x113/0x450 [ 1175.910852][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.917501][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1175.922808][T16483] do_fast_syscall_32+0x33/0x70 [ 1175.927819][T16483] do_SYSENTER_32+0x1b/0x20 [ 1175.932595][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1175.939166][T16483] [ 1175.941587][T16483] Uninit was stored to memory at: [ 1175.946990][T16483] __get_compat_msghdr+0x514/0x750 [ 1175.952435][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1175.957762][T16483] ___sys_recvmsg+0x19d/0x890 [ 1175.962729][T16483] do_recvmmsg+0x63a/0x10a0 [ 1175.967644][T16483] __sys_recvmmsg+0x113/0x450 [ 1175.972596][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1175.979021][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1175.984339][T16483] do_fast_syscall_32+0x33/0x70 [ 1175.989352][T16483] do_SYSENTER_32+0x1b/0x20 [ 1175.994149][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.000707][T16483] [ 1176.003241][T16483] Uninit was stored to memory at: [ 1176.008494][T16483] __get_compat_msghdr+0x514/0x750 [ 1176.013939][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1176.019080][T16483] ___sys_recvmsg+0x19d/0x890 [ 1176.024050][T16483] do_recvmmsg+0x63a/0x10a0 [ 1176.028732][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.033769][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.040373][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1176.045772][T16483] do_fast_syscall_32+0x33/0x70 [ 1176.050792][T16483] do_SYSENTER_32+0x1b/0x20 [ 1176.055671][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.062379][T16483] [ 1176.064812][T16483] Uninit was stored to memory at: [ 1176.070087][T16483] __get_compat_msghdr+0x514/0x750 [ 1176.075608][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1176.080673][T16483] ___sys_recvmsg+0x19d/0x890 [ 1176.085692][T16483] do_recvmmsg+0x63a/0x10a0 [ 1176.090361][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.095420][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.102063][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1176.107289][T16483] do_fast_syscall_32+0x33/0x70 [ 1176.112516][T16483] do_SYSENTER_32+0x1b/0x20 [ 1176.117195][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.123886][T16483] [ 1176.126335][T16483] Uninit was stored to memory at: [ 1176.131602][T16483] __get_compat_msghdr+0x514/0x750 [ 1176.137052][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1176.142227][T16483] ___sys_recvmsg+0x19d/0x890 [ 1176.147058][T16483] do_recvmmsg+0x63a/0x10a0 [ 1176.151713][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.156687][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.163224][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1176.168431][T16483] do_fast_syscall_32+0x33/0x70 [ 1176.171439][T16519] not chained 970000 origins [ 1176.173503][T16483] do_SYSENTER_32+0x1b/0x20 [ 1176.173596][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.173757][T16483] [ 1176.173774][T16483] Uninit was stored to memory at: [ 1176.173934][T16483] __get_compat_msghdr+0x514/0x750 [ 1176.185096][T16519] CPU: 1 PID: 16519 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1176.189630][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1176.191970][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1176.192025][T16519] Call Trace: [ 1176.192056][T16519] [ 1176.192086][T16519] dump_stack_lvl+0x1c8/0x256 [ 1176.197116][T16483] ___sys_recvmsg+0x19d/0x890 [ 1176.202247][T16519] dump_stack+0x1a/0x1c [ 1176.202377][T16519] kmsan_internal_chain_origin+0x78/0x120 [ 1176.213045][T16483] do_recvmmsg+0x63a/0x10a0 [ 1176.217793][T16519] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1176.227977][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.231166][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.234216][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.238797][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1176.243578][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1176.247644][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.253615][T16483] do_fast_syscall_32+0x33/0x70 [ 1176.258116][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.264293][T16483] do_SYSENTER_32+0x1b/0x20 [ 1176.268873][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.274094][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.280276][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.286628][T16483] [ 1176.291576][T16519] ? __get_compat_msghdr+0x5b/0x750 [ 1176.296882][T16483] Uninit was stored to memory at: [ 1176.301637][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.307682][T16483] __get_compat_msghdr+0x514/0x750 [ 1176.311961][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.312099][T16519] ? should_fail+0x3f/0x810 [ 1176.317177][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1176.323516][T16519] ? __stack_depot_save+0x21/0x4b0 [ 1176.323632][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.329435][T16483] ___sys_recvmsg+0x19d/0x890 [ 1176.331776][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1176.337170][T16483] do_recvmmsg+0x63a/0x10a0 [ 1176.342104][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.342223][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.347324][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.352465][T16519] __msan_chain_origin+0xbd/0x140 [ 1176.352594][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.358427][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.362970][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.368021][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1176.373150][T16519] ? ___sys_recvmsg+0xa9/0x890 [ 1176.373246][T16519] ? do_recvmmsg+0x63a/0x10a0 [ 1176.378376][T16483] do_fast_syscall_32+0x33/0x70 [ 1176.383070][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.383181][T16519] ? __schedule+0x1609/0x21d0 [ 1176.389459][T16483] do_SYSENTER_32+0x1b/0x20 [ 1176.393985][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.394106][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.399195][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.405448][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.405564][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1176.410239][T16483] [ 1176.410263][T16483] Local variable msg_sys created at: [ 1176.415296][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.415428][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1176.420555][T16483] do_recvmmsg+0x5f/0x10a0 [ 1176.426819][T16519] ? __sys_recvmmsg+0x52/0x450 [ 1176.426914][T16519] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.431782][T16483] __sys_recvmmsg+0x113/0x450 [ 1176.436826][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.541474][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1176.546795][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.553241][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.558419][T16519] ? exit_to_user_mode_prepare+0x119/0x220 [ 1176.564393][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.569395][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.574055][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.580684][T16519] RIP: 0023:0xf7fb7549 [ 1176.584865][T16519] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1176.604660][T16519] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1176.613233][T16519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1176.621333][T16519] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1176.629431][T16519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.637609][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.645697][T16519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1176.653814][T16519] [ 1176.657641][T16519] Uninit was stored to memory at: [ 1176.663017][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.668338][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.673508][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.678355][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.683130][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.687973][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.694602][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.699803][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.704922][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.709599][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.716267][T16519] [ 1176.718673][T16519] Uninit was stored to memory at: [ 1176.724030][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.729365][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.734533][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.739376][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.744169][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.749015][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.755559][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.760757][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.765882][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.770546][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.777248][T16519] [ 1176.779654][T16519] Uninit was stored to memory at: [ 1176.784999][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.790325][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.795477][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.800328][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.805094][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.809942][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.816473][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.821671][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.826784][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.831458][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.838118][T16519] [ 1176.840538][T16519] Uninit was stored to memory at: [ 1176.845893][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.851220][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.856406][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.861251][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.866012][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.870880][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.877432][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.882995][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.888009][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.892806][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.899374][T16519] [ 1176.901773][T16519] Uninit was stored to memory at: [ 1176.907693][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.913426][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.918490][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.923430][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.928121][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.933048][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1176.939577][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1176.944871][T16519] do_fast_syscall_32+0x33/0x70 [ 1176.949902][T16519] do_SYSENTER_32+0x1b/0x20 [ 1176.954675][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1176.961246][T16519] [ 1176.963752][T16519] Uninit was stored to memory at: [ 1176.969023][T16519] __get_compat_msghdr+0x514/0x750 [ 1176.974450][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1176.979518][T16519] ___sys_recvmsg+0x19d/0x890 [ 1176.984455][T16519] do_recvmmsg+0x63a/0x10a0 [ 1176.989113][T16519] __sys_recvmmsg+0x113/0x450 [ 1176.994143][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.000596][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1177.006009][T16519] do_fast_syscall_32+0x33/0x70 [ 1177.011042][T16519] do_SYSENTER_32+0x1b/0x20 [ 1177.015791][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1177.022489][T16519] [ 1177.024898][T16519] Uninit was stored to memory at: [ 1177.030175][T16519] __get_compat_msghdr+0x514/0x750 [ 1177.035694][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1177.040764][T16519] ___sys_recvmsg+0x19d/0x890 [ 1177.045709][T16519] do_recvmmsg+0x63a/0x10a0 [ 1177.050460][T16519] __sys_recvmmsg+0x113/0x450 [ 1177.055395][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.061822][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1177.067164][T16519] do_fast_syscall_32+0x33/0x70 [ 1177.072285][T16519] do_SYSENTER_32+0x1b/0x20 [ 1177.076943][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1177.083606][T16519] [ 1177.086186][T16519] Local variable msg_sys created at: [ 1177.091563][T16519] do_recvmmsg+0x5f/0x10a0 [ 1177.096226][T16519] __sys_recvmmsg+0x113/0x450 [ 1177.538292][T16504] not chained 980000 origins [ 1177.543225][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1177.553911][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1177.564123][T16504] Call Trace: [ 1177.567510][T16504] [ 1177.570539][T16504] dump_stack_lvl+0x1c8/0x256 [ 1177.575438][T16504] dump_stack+0x1a/0x1c [ 1177.579800][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1177.585706][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1177.591958][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.597252][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1177.603711][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.609002][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.615019][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.620309][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.626304][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1177.631738][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.637040][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.643065][T16504] ? should_fail+0x3f/0x810 [ 1177.647753][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1177.653044][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.658341][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1177.664779][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.670068][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.676065][T16504] __msan_chain_origin+0xbd/0x140 [ 1177.681267][T16504] __get_compat_msghdr+0x514/0x750 [ 1177.686619][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1177.691672][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1177.696589][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1177.701426][T16504] ___sys_recvmsg+0x19d/0x890 [ 1177.706276][T16504] ? __schedule+0x1609/0x21d0 [ 1177.711127][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.716420][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.722430][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.727731][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1177.733741][T16504] do_recvmmsg+0x63a/0x10a0 [ 1177.738433][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1177.744877][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1177.749796][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.756405][T16504] __sys_recvmmsg+0x113/0x450 [ 1177.761248][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1177.766555][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.773000][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1177.778185][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1177.784173][T16504] do_fast_syscall_32+0x33/0x70 [ 1177.789185][T16504] do_SYSENTER_32+0x1b/0x20 [ 1177.793860][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1177.800411][T16504] RIP: 0023:0xf7f0b549 [ 1177.804612][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1177.824418][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1177.833009][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1177.841122][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1177.849226][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1177.857331][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.865614][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.873744][T16504] [ 1177.880591][T16504] Uninit was stored to memory at: [ 1177.886262][T16504] __get_compat_msghdr+0x514/0x750 [ 1177.891587][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1177.896783][T16504] ___sys_recvmsg+0x19d/0x890 [ 1177.901792][T16504] do_recvmmsg+0x63a/0x10a0 [ 1177.906566][T16504] __sys_recvmmsg+0x113/0x450 [ 1177.911492][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.918071][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1177.923413][T16504] do_fast_syscall_32+0x33/0x70 [ 1177.928433][T16504] do_SYSENTER_32+0x1b/0x20 [ 1177.933228][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1177.939783][T16504] [ 1177.942311][T16504] Uninit was stored to memory at: [ 1177.947589][T16504] __get_compat_msghdr+0x514/0x750 [ 1177.953035][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1177.958091][T16504] ___sys_recvmsg+0x19d/0x890 [ 1177.963113][T16504] do_recvmmsg+0x63a/0x10a0 [ 1177.967771][T16504] __sys_recvmmsg+0x113/0x450 [ 1177.972726][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1177.979152][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1177.984525][T16504] do_fast_syscall_32+0x33/0x70 [ 1177.989537][T16504] do_SYSENTER_32+0x1b/0x20 [ 1177.994384][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.000950][T16504] [ 1178.003604][T16504] Uninit was stored to memory at: [ 1178.008901][T16504] __get_compat_msghdr+0x514/0x750 [ 1178.014365][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1178.019432][T16504] ___sys_recvmsg+0x19d/0x890 [ 1178.024441][T16504] do_recvmmsg+0x63a/0x10a0 [ 1178.029109][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.034077][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.040535][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1178.045923][T16504] do_fast_syscall_32+0x33/0x70 [ 1178.050936][T16504] do_SYSENTER_32+0x1b/0x20 [ 1178.055793][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.062477][T16504] [ 1178.064881][T16504] Uninit was stored to memory at: [ 1178.070135][T16504] __get_compat_msghdr+0x514/0x750 [ 1178.075647][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1178.080699][T16504] ___sys_recvmsg+0x19d/0x890 [ 1178.085719][T16504] do_recvmmsg+0x63a/0x10a0 [ 1178.090371][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.095435][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.101986][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1178.107176][T16504] do_fast_syscall_32+0x33/0x70 [ 1178.112377][T16504] do_SYSENTER_32+0x1b/0x20 [ 1178.117039][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.123783][T16504] [ 1178.126187][T16504] Uninit was stored to memory at: [ 1178.131450][T16504] __get_compat_msghdr+0x514/0x750 [ 1178.136967][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1178.142142][T16504] ___sys_recvmsg+0x19d/0x890 [ 1178.146975][T16504] do_recvmmsg+0x63a/0x10a0 [ 1178.151627][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.156654][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.163210][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1178.168402][T16504] do_fast_syscall_32+0x33/0x70 [ 1178.173595][T16504] do_SYSENTER_32+0x1b/0x20 [ 1178.178251][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.184939][T16504] [ 1178.187369][T16504] Uninit was stored to memory at: [ 1178.192814][T16504] __get_compat_msghdr+0x514/0x750 [ 1178.198221][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1178.203472][T16504] ___sys_recvmsg+0x19d/0x890 [ 1178.208309][T16504] do_recvmmsg+0x63a/0x10a0 [ 1178.213263][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.218103][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.224718][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1178.229903][T16504] do_fast_syscall_32+0x33/0x70 [ 1178.235107][T16504] do_SYSENTER_32+0x1b/0x20 [ 1178.239773][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.246539][T16504] [ 1178.248946][T16504] Uninit was stored to memory at: [ 1178.254375][T16504] __get_compat_msghdr+0x514/0x750 [ 1178.259699][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1178.264942][T16504] ___sys_recvmsg+0x19d/0x890 [ 1178.269775][T16504] do_recvmmsg+0x63a/0x10a0 [ 1178.274614][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.279454][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.286075][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1178.291348][T16504] do_fast_syscall_32+0x33/0x70 [ 1178.296555][T16504] do_SYSENTER_32+0x1b/0x20 [ 1178.301213][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.307961][T16504] [ 1178.310372][T16504] Local variable msg_sys created at: [ 1178.315931][T16504] do_recvmmsg+0x5f/0x10a0 [ 1178.320588][T16504] __sys_recvmmsg+0x113/0x450 [ 1178.657828][T16483] not chained 990000 origins [ 1178.662902][T16483] CPU: 0 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1178.673677][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1178.684045][T16483] Call Trace: [ 1178.687438][T16483] [ 1178.690465][T16483] dump_stack_lvl+0x1c8/0x256 [ 1178.695365][T16483] dump_stack+0x1a/0x1c [ 1178.699709][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1178.705617][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1178.711867][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.717176][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1178.723611][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.728925][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.734930][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.740222][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.746249][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1178.751756][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.757054][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.763245][T16483] ? should_fail+0x3f/0x810 [ 1178.767946][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1178.773260][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.778643][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1178.785170][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.790464][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.796463][T16483] __msan_chain_origin+0xbd/0x140 [ 1178.801663][T16483] __get_compat_msghdr+0x514/0x750 [ 1178.807019][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1178.812081][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1178.817002][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1178.821839][T16483] ___sys_recvmsg+0x19d/0x890 [ 1178.826689][T16483] ? __schedule+0x1609/0x21d0 [ 1178.831543][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.836840][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.842850][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.848149][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1178.854163][T16483] do_recvmmsg+0x63a/0x10a0 [ 1178.858858][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1178.865311][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1178.870277][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.876986][T16483] __sys_recvmmsg+0x113/0x450 [ 1178.881834][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1178.887146][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1178.893606][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1178.898793][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1178.904784][T16483] do_fast_syscall_32+0x33/0x70 [ 1178.909808][T16483] do_SYSENTER_32+0x1b/0x20 [ 1178.914472][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1178.921039][T16483] RIP: 0023:0xf7faf549 [ 1178.925249][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1178.945078][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1178.953677][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1178.961818][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1178.970045][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.978163][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.986278][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.994414][T16483] [ 1179.001207][T16483] Uninit was stored to memory at: [ 1179.006936][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.012382][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.017437][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.022398][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.027058][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.032039][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.038471][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.043792][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.048798][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.053576][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.060247][T16483] [ 1179.062775][T16483] Uninit was stored to memory at: [ 1179.068035][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.073550][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.078607][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.083567][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.088400][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.093360][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.099792][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.105170][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.110182][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.114979][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.121539][T16483] [ 1179.124097][T16483] Uninit was stored to memory at: [ 1179.129352][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.134822][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.139915][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.144903][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.149577][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.154543][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.160978][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.166364][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.171412][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.176380][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.183471][T16483] [ 1179.185882][T16483] Uninit was stored to memory at: [ 1179.191145][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.196670][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.201729][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.206667][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.211510][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.216501][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.223042][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.228229][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.233434][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.238106][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.244927][T16483] [ 1179.247428][T16483] Uninit was stored to memory at: [ 1179.252890][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.258232][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.263595][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.268438][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.273304][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.278141][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.284710][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.289935][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.295071][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.299730][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.306436][T16483] [ 1179.308844][T16483] Uninit was stored to memory at: [ 1179.314213][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.319546][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.324759][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.329601][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.334500][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.339380][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.346035][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.351230][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.356602][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.361268][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.368049][T16483] [ 1179.370462][T16483] Uninit was stored to memory at: [ 1179.375931][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.381259][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.386524][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.391387][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.396188][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.401021][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.407642][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.412968][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.417983][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.422837][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.429409][T16483] [ 1179.431815][T16483] Local variable msg_sys created at: [ 1179.437402][T16483] do_recvmmsg+0x5f/0x10a0 [ 1179.442170][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.508314][T16483] not chained 1000000 origins [ 1179.513367][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1179.524052][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1179.534427][T16483] Call Trace: [ 1179.537817][T16483] [ 1179.540836][T16483] dump_stack_lvl+0x1c8/0x256 [ 1179.545758][T16483] dump_stack+0x1a/0x1c [ 1179.550118][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1179.556022][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1179.562307][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.567590][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1179.574012][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.579287][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.585267][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.590717][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.596700][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1179.602097][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.607372][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.613364][T16483] ? should_fail+0x3f/0x810 [ 1179.618037][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1179.623309][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.628583][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1179.635003][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.640297][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.646279][T16483] __msan_chain_origin+0xbd/0x140 [ 1179.651467][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.656808][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.661851][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1179.666762][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1179.671591][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.676547][T16483] ? __schedule+0x1609/0x21d0 [ 1179.681399][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.686708][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.692708][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.698007][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1179.703999][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.708684][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1179.715111][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1179.720013][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.726623][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.731474][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1179.736769][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.743198][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.748369][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1179.754340][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.759341][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.763984][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.770540][T16483] RIP: 0023:0xf7faf549 [ 1179.774724][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1179.794690][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1179.803257][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1179.811442][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1179.819534][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.827622][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.835724][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.843839][T16483] [ 1179.853694][T16483] Uninit was stored to memory at: [ 1179.858978][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.871565][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.877406][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.882334][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.886989][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.891819][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.898331][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.903612][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.908622][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.913372][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.919931][T16483] [ 1179.922423][T16483] Uninit was stored to memory at: [ 1179.927776][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.933187][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.938239][T16483] ___sys_recvmsg+0x19d/0x890 [ 1179.943175][T16483] do_recvmmsg+0x63a/0x10a0 [ 1179.947921][T16483] __sys_recvmmsg+0x113/0x450 [ 1179.952855][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1179.959276][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1179.964687][T16483] do_fast_syscall_32+0x33/0x70 [ 1179.969698][T16483] do_SYSENTER_32+0x1b/0x20 [ 1179.974447][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1179.981016][T16483] [ 1179.983516][T16483] Uninit was stored to memory at: [ 1179.988773][T16483] __get_compat_msghdr+0x514/0x750 [ 1179.994218][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1179.999444][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.004366][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.009025][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.013960][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.020385][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.025698][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.030713][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.035491][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.042131][T16483] [ 1180.044537][T16483] Uninit was stored to memory at: [ 1180.049793][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.055223][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.060277][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.065301][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.069986][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.074934][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.081358][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.086637][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.091732][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.096476][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.103285][T16483] [ 1180.105692][T16483] Uninit was stored to memory at: [ 1180.110953][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.116373][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.121444][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.126463][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.131121][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.136119][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.142625][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.147808][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.153066][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.157734][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.164479][T16483] [ 1180.166976][T16483] Uninit was stored to memory at: [ 1180.172366][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.177699][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.182931][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.187773][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.192603][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.197437][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.204020][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.209219][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.214387][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.219050][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.225733][T16483] [ 1180.228140][T16483] Uninit was stored to memory at: [ 1180.233544][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.238891][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.244119][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.248950][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.253777][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.258665][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.265243][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.270440][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.275706][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.280373][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.287354][T16483] [ 1180.289768][T16483] Local variable msg_sys created at: [ 1180.295396][T16483] do_recvmmsg+0x5f/0x10a0 [ 1180.299962][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.373126][T16483] not chained 1010000 origins [ 1180.384652][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1180.395399][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1180.405667][T16483] Call Trace: [ 1180.409062][T16483] [ 1180.412092][T16483] dump_stack_lvl+0x1c8/0x256 [ 1180.416985][T16483] dump_stack+0x1a/0x1c [ 1180.421333][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1180.427244][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1180.433533][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.438826][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1180.445272][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.450673][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.456674][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.461963][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.467954][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1180.473542][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.479015][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.485025][T16483] ? should_fail+0x3f/0x810 [ 1180.489725][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1180.495026][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.500321][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1180.506943][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.512239][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.518243][T16483] __msan_chain_origin+0xbd/0x140 [ 1180.523453][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.528806][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.533882][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1180.538810][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1180.543657][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.548685][T16483] ? __schedule+0x1609/0x21d0 [ 1180.553538][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.558836][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.564844][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.570157][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1180.576188][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.580889][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1180.587351][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1180.592286][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.598901][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.603769][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1180.609174][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.615621][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.620810][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1180.626809][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.631833][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.636529][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.643106][T16483] RIP: 0023:0xf7faf549 [ 1180.647407][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1180.667254][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1180.675889][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1180.684012][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1180.692146][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1180.700255][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.708459][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1180.716622][T16483] [ 1180.727344][T16483] Uninit was stored to memory at: [ 1180.733172][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.738507][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.743749][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.748871][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.753621][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.758454][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.764979][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.770196][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.775430][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.780197][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.787132][T16483] [ 1180.789560][T16483] Uninit was stored to memory at: [ 1180.794903][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.800308][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.805480][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.810332][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.815083][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.819915][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.826464][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.831654][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.836855][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.841520][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.848296][T16483] [ 1180.850716][T16483] Uninit was stored to memory at: [ 1180.856142][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.861764][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.869255][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.874702][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.879452][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.884399][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.890923][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.896277][T16483] do_fast_syscall_32+0x33/0x70 [ 1180.901316][T16483] do_SYSENTER_32+0x1b/0x20 [ 1180.906239][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1180.912942][T16483] [ 1180.915357][T16483] Uninit was stored to memory at: [ 1180.917383][T16504] not chained 1020000 origins [ 1180.920726][T16483] __get_compat_msghdr+0x514/0x750 [ 1180.925579][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1180.930646][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1180.941325][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1180.941379][T16504] Call Trace: [ 1180.941412][T16504] [ 1180.941444][T16504] dump_stack_lvl+0x1c8/0x256 [ 1180.946362][T16483] ___sys_recvmsg+0x19d/0x890 [ 1180.956451][T16504] dump_stack+0x1a/0x1c [ 1180.959812][T16483] do_recvmmsg+0x63a/0x10a0 [ 1180.962763][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1180.967545][T16483] __sys_recvmmsg+0x113/0x450 [ 1180.972231][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1180.976562][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1180.981079][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1180.986950][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1180.991694][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1180.997845][T16483] do_fast_syscall_32+0x33/0x70 [ 1181.004036][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.009251][T16483] do_SYSENTER_32+0x1b/0x20 [ 1181.014375][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.020964][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.026017][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.026137][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.031306][T16483] [ 1181.031326][T16483] Uninit was stored to memory at: [ 1181.035823][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1181.035978][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.041963][T16483] __get_compat_msghdr+0x514/0x750 [ 1181.048223][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.053505][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1181.059249][T16504] ? should_fail+0x3f/0x810 [ 1181.061747][T16483] ___sys_recvmsg+0x19d/0x890 [ 1181.066866][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1181.066982][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.072669][T16483] do_recvmmsg+0x63a/0x10a0 [ 1181.077708][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1181.082936][T16483] __sys_recvmmsg+0x113/0x450 [ 1181.088649][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.093579][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.098014][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.102809][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1181.107818][T16504] __msan_chain_origin+0xbd/0x140 [ 1181.113027][T16483] do_fast_syscall_32+0x33/0x70 [ 1181.117463][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.123785][T16483] do_SYSENTER_32+0x1b/0x20 [ 1181.128510][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.133797][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.139932][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1181.145830][T16483] [ 1181.150770][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1181.155883][T16483] Uninit was stored to memory at: [ 1181.160670][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.166074][T16483] __get_compat_msghdr+0x514/0x750 [ 1181.170398][T16504] ? __schedule+0x1609/0x21d0 [ 1181.175330][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1181.181697][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.186648][T16483] ___sys_recvmsg+0x19d/0x890 [ 1181.188910][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.193758][T16483] do_recvmmsg+0x63a/0x10a0 [ 1181.198708][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.203467][T16483] __sys_recvmmsg+0x113/0x450 [ 1181.208505][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.213261][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.218051][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.223235][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1181.227871][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1181.233760][T16483] do_fast_syscall_32+0x33/0x70 [ 1181.238259][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1181.243446][T16483] do_SYSENTER_32+0x1b/0x20 [ 1181.248135][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.254026][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.260204][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.264784][T16483] [ 1181.269734][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1181.276073][T16483] Uninit was stored to memory at: [ 1181.280887][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.285885][T16483] __get_compat_msghdr+0x514/0x750 [ 1181.290173][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.296651][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1181.302910][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1181.303029][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.307843][T16483] ___sys_recvmsg+0x19d/0x890 [ 1181.310209][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.315407][T16483] do_recvmmsg+0x63a/0x10a0 [ 1181.320347][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.326674][T16483] __sys_recvmmsg+0x113/0x450 [ 1181.331710][T16504] RIP: 0023:0xf7f0b549 [ 1181.336848][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.341765][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1181.347653][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1181.352436][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1181.352529][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1181.357208][T16483] do_fast_syscall_32+0x33/0x70 [ 1181.361713][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1181.366305][T16483] do_SYSENTER_32+0x1b/0x20 [ 1181.372646][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1181.372707][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.377412][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.381486][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1181.387932][T16483] [ 1181.407483][T16504] [ 1181.411250][T16504] Uninit was stored to memory at: [ 1181.412720][T16483] Local variable msg_sys created at: [ 1181.412756][T16483] do_recvmmsg+0x5f/0x10a0 [ 1181.412845][T16483] __sys_recvmmsg+0x113/0x450 [ 1181.508330][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.513872][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.518944][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.523906][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.528569][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.533809][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.540357][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.545872][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.550934][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.555731][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.562411][T16504] [ 1181.564816][T16504] Uninit was stored to memory at: [ 1181.570083][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.575522][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.580577][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.585532][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.590190][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.595143][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.601565][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.606881][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.612025][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.616715][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.623404][T16504] [ 1181.625809][T16504] Uninit was stored to memory at: [ 1181.631065][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.636535][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.641690][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.646665][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.651344][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.656388][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.663035][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.668228][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.673400][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.678065][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.684776][T16504] [ 1181.687187][T16504] Uninit was stored to memory at: [ 1181.692575][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.698252][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.703621][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.708463][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.713252][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.718171][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.724726][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.729918][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.735077][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.739827][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.746527][T16504] [ 1181.748936][T16504] Uninit was stored to memory at: [ 1181.754321][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.759748][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.764921][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.769764][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.774578][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.779414][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.786091][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.791285][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.796429][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.801096][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.807779][T16504] [ 1181.810183][T16504] Uninit was stored to memory at: [ 1181.815563][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.820886][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.826137][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.830981][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.835829][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.840661][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.847270][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.852586][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.857614][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.860418][T16519] not chained 1030000 origins [ 1181.862375][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.862535][T16504] [ 1181.862553][T16504] Uninit was stored to memory at: [ 1181.867222][T16519] CPU: 1 PID: 16519 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1181.873803][T16504] __get_compat_msghdr+0x514/0x750 [ 1181.875886][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1181.880916][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1181.891423][T16519] Call Trace: [ 1181.891457][T16519] [ 1181.891494][T16519] dump_stack_lvl+0x1c8/0x256 [ 1181.896911][T16504] ___sys_recvmsg+0x19d/0x890 [ 1181.906917][T16519] dump_stack+0x1a/0x1c [ 1181.907048][T16519] kmsan_internal_chain_origin+0x78/0x120 [ 1181.911975][T16504] do_recvmmsg+0x63a/0x10a0 [ 1181.915165][T16519] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1181.918108][T16504] __sys_recvmmsg+0x113/0x450 [ 1181.922796][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1181.922914][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1181.927577][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1181.931751][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1181.937672][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1181.942193][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.942324][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1181.948384][T16504] do_fast_syscall_32+0x33/0x70 [ 1181.953176][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.953305][T16519] ? __get_compat_msghdr+0x5b/0x750 [ 1181.958673][T16504] do_SYSENTER_32+0x1b/0x20 [ 1181.965375][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1181.965496][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1181.971733][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1181.976880][T16519] ? should_fail+0x3f/0x810 [ 1181.982009][T16504] [ 1181.987886][T16519] ? __stack_depot_save+0x21/0x4b0 [ 1181.993317][T16504] Local variable msg_sys created at: [ 1181.998065][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1182.004000][T16504] do_recvmmsg+0x5f/0x10a0 [ 1182.009099][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1182.013711][T16504] __sys_recvmmsg+0x113/0x450 [ 1182.018742][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1182.075661][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.081670][T16519] __msan_chain_origin+0xbd/0x140 [ 1182.086880][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.092236][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.097487][T16519] ? ___sys_recvmsg+0xa9/0x890 [ 1182.102406][T16519] ? do_recvmmsg+0x63a/0x10a0 [ 1182.107250][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.112093][T16519] ? __schedule+0x1609/0x21d0 [ 1182.116936][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1182.122230][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.128231][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1182.133523][T16519] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.139537][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.144315][T16519] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1182.150763][T16519] ? __sys_recvmmsg+0x52/0x450 [ 1182.155775][T16519] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.162385][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.167230][T16519] ? kmsan_get_metadata+0x33/0x220 [ 1182.172717][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.179176][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.184366][T16519] ? exit_to_user_mode_prepare+0x119/0x220 [ 1182.190353][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.195372][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.200035][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.206681][T16519] RIP: 0023:0xf7fb7549 [ 1182.210875][T16519] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1182.230690][T16519] RSP: 002b:00000000f7f915cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1182.239277][T16519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1182.247744][T16519] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1182.255849][T16519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1182.263979][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.272095][T16519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.280226][T16519] [ 1182.290272][T16519] Uninit was stored to memory at: [ 1182.296165][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.301659][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.306840][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.311685][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.316450][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.321337][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.327865][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.333152][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.338164][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.342916][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.349480][T16519] [ 1182.351989][T16519] Uninit was stored to memory at: [ 1182.357236][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.362669][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.367727][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.372658][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.377314][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.382246][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.388667][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.393954][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.398970][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.403780][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.410333][T16519] [ 1182.412898][T16519] Uninit was stored to memory at: [ 1182.418152][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.423617][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.429115][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.434115][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.438769][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.443767][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.450329][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.455681][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.460682][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.465518][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.472193][T16519] [ 1182.474595][T16519] Uninit was stored to memory at: [ 1182.479859][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.485330][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.490413][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.495449][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.500116][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.505146][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.511606][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.516975][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.522150][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.526805][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.533580][T16519] [ 1182.535989][T16519] Uninit was stored to memory at: [ 1182.541455][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.547091][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.552277][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.557141][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.561813][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.566750][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.573379][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.578569][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.583760][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.588425][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.595083][T16519] [ 1182.597494][T16519] Uninit was stored to memory at: [ 1182.602863][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.608187][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.613433][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.618275][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.623098][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.627961][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.634653][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.639853][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.645049][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.649704][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.656429][T16519] [ 1182.658838][T16519] Uninit was stored to memory at: [ 1182.664275][T16519] __get_compat_msghdr+0x514/0x750 [ 1182.669686][T16519] get_compat_msghdr+0x8c/0x1c0 [ 1182.675007][T16519] ___sys_recvmsg+0x19d/0x890 [ 1182.679868][T16519] do_recvmmsg+0x63a/0x10a0 [ 1182.684709][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.689582][T16519] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.691167][T16504] not chained 1040000 origins [ 1182.696115][T16519] __do_fast_syscall_32+0x87/0xe0 [ 1182.696215][T16519] do_fast_syscall_32+0x33/0x70 [ 1182.700898][T16504] CPU: 0 PID: 16504 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1182.706037][T16519] do_SYSENTER_32+0x1b/0x20 [ 1182.710803][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1182.721585][T16519] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.726027][T16504] Call Trace: [ 1182.726061][T16504] [ 1182.726093][T16504] dump_stack_lvl+0x1c8/0x256 [ 1182.736349][T16519] [ 1182.742613][T16504] dump_stack+0x1a/0x1c [ 1182.745970][T16519] Local variable msg_sys created at: [ 1182.748915][T16504] kmsan_internal_chain_origin+0x78/0x120 [ 1182.753719][T16519] do_recvmmsg+0x5f/0x10a0 [ 1182.755946][T16504] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1182.760110][T16519] __sys_recvmmsg+0x113/0x450 [ 1182.765410][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.765529][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1182.798706][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.804274][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.810285][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.815580][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.821574][T16504] ? __get_compat_msghdr+0x5b/0x750 [ 1182.826992][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.832373][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.838405][T16504] ? should_fail+0x3f/0x810 [ 1182.843089][T16504] ? __stack_depot_save+0x21/0x4b0 [ 1182.848381][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.853674][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1182.860109][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.865408][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.871416][T16504] __msan_chain_origin+0xbd/0x140 [ 1182.876724][T16504] __get_compat_msghdr+0x514/0x750 [ 1182.882077][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1182.887135][T16504] ? ___sys_recvmsg+0xa9/0x890 [ 1182.892057][T16504] ? do_recvmmsg+0x63a/0x10a0 [ 1182.896899][T16504] ___sys_recvmsg+0x19d/0x890 [ 1182.901746][T16504] ? __schedule+0x1609/0x21d0 [ 1182.906597][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.911892][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.917896][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.923191][T16504] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1182.929254][T16504] do_recvmmsg+0x63a/0x10a0 [ 1182.933954][T16504] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1182.940406][T16504] ? __sys_recvmmsg+0x52/0x450 [ 1182.945325][T16504] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.951937][T16504] __sys_recvmmsg+0x113/0x450 [ 1182.956762][T16504] ? kmsan_get_metadata+0x33/0x220 [ 1182.962068][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1182.968512][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1182.973699][T16504] ? exit_to_user_mode_prepare+0x119/0x220 [ 1182.979686][T16504] do_fast_syscall_32+0x33/0x70 [ 1182.984781][T16504] do_SYSENTER_32+0x1b/0x20 [ 1182.989442][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1182.996000][T16504] RIP: 0023:0xf7f0b549 [ 1183.000196][T16504] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1183.020175][T16504] RSP: 002b:00000000f7ee55cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1183.028763][T16504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1183.036984][T16504] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1183.045180][T16504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.053286][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.061403][T16504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.067335][T16483] not chained 1050000 origins [ 1183.069563][T16504] [ 1183.077384][T16483] CPU: 1 PID: 16483 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1183.081283][T16504] Uninit was stored to memory at: [ 1183.087986][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1183.088041][T16483] Call Trace: [ 1183.088073][T16483] [ 1183.088103][T16483] dump_stack_lvl+0x1c8/0x256 [ 1183.088259][T16483] dump_stack+0x1a/0x1c [ 1183.088384][T16483] kmsan_internal_chain_origin+0x78/0x120 [ 1183.088504][T16483] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1183.093762][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.103680][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.103798][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1183.107076][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.110029][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.114809][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.118868][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.124888][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.130858][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.136079][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.141096][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.147563][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.152313][T16483] ? __get_compat_msghdr+0x5b/0x750 [ 1183.157532][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.162215][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.162335][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.168131][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.172743][T16483] ? should_fail+0x3f/0x810 [ 1183.172862][T16483] ? __stack_depot_save+0x21/0x4b0 [ 1183.177999][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.182683][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.182802][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1183.188596][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.194855][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.194978][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.200168][T16504] [ 1183.200186][T16504] Uninit was stored to memory at: [ 1183.205204][T16483] __msan_chain_origin+0xbd/0x140 [ 1183.205323][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.210739][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.216454][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.221385][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.225902][T16483] ? ___sys_recvmsg+0xa9/0x890 [ 1183.225999][T16483] ? do_recvmmsg+0x63a/0x10a0 [ 1183.231121][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.235640][T16483] ___sys_recvmsg+0x19d/0x890 [ 1183.235753][T16483] ? __schedule+0x1609/0x21d0 [ 1183.240852][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.247120][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.247241][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.253991][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.259028][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.265027][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.267307][T16483] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1183.272439][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.277376][T16483] do_recvmmsg+0x63a/0x10a0 [ 1183.282584][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.287635][T16483] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1183.292652][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.297421][T16483] ? __sys_recvmmsg+0x52/0x450 [ 1183.302276][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.306942][T16483] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.311625][T16504] [ 1183.311645][T16504] Uninit was stored to memory at: [ 1183.316318][T16483] __sys_recvmmsg+0x113/0x450 [ 1183.316418][T16483] ? kmsan_get_metadata+0x33/0x220 [ 1183.321235][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.325634][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.325771][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1183.332087][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.337702][T16483] ? exit_to_user_mode_prepare+0x119/0x220 [ 1183.342489][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.347521][T16483] do_fast_syscall_32+0x33/0x70 [ 1183.353872][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.359589][T16483] do_SYSENTER_32+0x1b/0x20 [ 1183.364715][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.369123][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.374074][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.380224][T16483] RIP: 0023:0xf7faf549 [ 1183.384936][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.389610][T16483] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1183.396043][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.402448][T16483] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1183.402540][T16483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1183.404885][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.409930][T16483] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1183.414733][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.419749][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.425143][T16504] [ 1183.431371][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.436509][T16504] Uninit was stored to memory at: [ 1183.441264][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.447322][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.451877][T16483] [ 1183.460605][T16483] Uninit was stored to memory at: [ 1183.461366][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.466895][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.470684][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.477198][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.483651][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.487705][T16483] ___sys_recvmsg+0x19d/0x890 [ 1183.492836][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.512615][T16483] do_recvmmsg+0x63a/0x10a0 [ 1183.517502][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.526058][T16483] __sys_recvmmsg+0x113/0x450 [ 1183.534159][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.538738][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.546833][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.553228][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1183.561234][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.563653][T16483] do_fast_syscall_32+0x33/0x70 [ 1183.571658][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.576772][T16483] do_SYSENTER_32+0x1b/0x20 [ 1183.585767][T16504] [ 1183.585786][T16504] Uninit was stored to memory at: [ 1183.590864][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.594134][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.599013][T16483] [ 1183.599031][T16483] Uninit was stored to memory at: [ 1183.603973][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.609470][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.614125][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.618967][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.623575][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.628237][T16483] ___sys_recvmsg+0x19d/0x890 [ 1183.633021][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.637516][T16483] do_recvmmsg+0x63a/0x10a0 [ 1183.643895][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.648618][T16483] __sys_recvmmsg+0x113/0x450 [ 1183.653780][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.660105][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.665064][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.670079][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1183.674689][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.679527][T16483] do_fast_syscall_32+0x33/0x70 [ 1183.685964][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.690460][T16483] do_SYSENTER_32+0x1b/0x20 [ 1183.692896][T16504] [ 1183.692916][T16504] Uninit was stored to memory at: [ 1183.697921][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.704582][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.709538][T16483] [ 1183.709557][T16483] Uninit was stored to memory at: [ 1183.711980][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.717570][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.722520][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.727725][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.732527][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.737369][T16483] ___sys_recvmsg+0x19d/0x890 [ 1183.741988][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.746652][T16483] do_recvmmsg+0x63a/0x10a0 [ 1183.751334][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.755929][T16483] __sys_recvmmsg+0x113/0x450 [ 1183.762294][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.766961][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.772094][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.778322][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1183.783283][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.788294][T16483] do_fast_syscall_32+0x33/0x70 [ 1183.792993][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.797894][T16483] do_SYSENTER_32+0x1b/0x20 [ 1183.804337][T16504] [ 1183.808827][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.811162][T16504] Uninit was stored to memory at: [ 1183.811321][T16504] __get_compat_msghdr+0x514/0x750 [ 1183.816275][T16483] [ 1183.816293][T16483] Uninit was stored to memory at: [ 1183.816443][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.822731][T16504] get_compat_msghdr+0x8c/0x1c0 [ 1183.827830][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.830186][T16504] ___sys_recvmsg+0x19d/0x890 [ 1183.835296][T16483] ___sys_recvmsg+0x19d/0x890 [ 1183.840177][T16504] do_recvmmsg+0x63a/0x10a0 [ 1183.845377][T16483] do_recvmmsg+0x63a/0x10a0 [ 1183.850080][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.855020][T16483] __sys_recvmmsg+0x113/0x450 [ 1183.859553][T16504] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.864318][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1183.869025][T16504] __do_fast_syscall_32+0x87/0xe0 [ 1183.873612][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1183.879883][T16504] do_fast_syscall_32+0x33/0x70 [ 1183.884668][T16483] do_fast_syscall_32+0x33/0x70 [ 1183.889724][T16504] do_SYSENTER_32+0x1b/0x20 [ 1183.896143][T16483] do_SYSENTER_32+0x1b/0x20 [ 1183.901025][T16504] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.906150][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1183.910676][T16504] [ 1183.910699][T16504] Local variable msg_sys created at: [ 1183.915699][T16483] [ 1183.915717][T16483] Uninit was stored to memory at: [ 1183.915882][T16483] __get_compat_msghdr+0x514/0x750 [ 1183.922151][T16504] do_recvmmsg+0x5f/0x10a0 [ 1183.926642][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1183.928977][T16504] __sys_recvmmsg+0x113/0x450 [ 1183.935414][T16483] ___sys_recvmsg+0x19d/0x890 [ 1184.099626][T16483] do_recvmmsg+0x63a/0x10a0 [ 1184.104413][T16483] __sys_recvmmsg+0x113/0x450 [ 1184.109255][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1184.115778][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1184.120969][T16483] do_fast_syscall_32+0x33/0x70 [ 1184.126091][T16483] do_SYSENTER_32+0x1b/0x20 [ 1184.130754][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1184.137506][T16483] [ 1184.139911][T16483] Uninit was stored to memory at: [ 1184.145266][T16483] __get_compat_msghdr+0x514/0x750 [ 1184.150589][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1184.155747][T16483] ___sys_recvmsg+0x19d/0x890 [ 1184.160587][T16483] do_recvmmsg+0x63a/0x10a0 [ 1184.165349][T16483] __sys_recvmmsg+0x113/0x450 [ 1184.170188][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1184.176724][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1184.182015][T16483] do_fast_syscall_32+0x33/0x70 [ 1184.187120][T16483] do_SYSENTER_32+0x1b/0x20 [ 1184.191819][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1184.198512][T16483] [ 1184.200919][T16483] Uninit was stored to memory at: [ 1184.206286][T16483] __get_compat_msghdr+0x514/0x750 [ 1184.211601][T16483] get_compat_msghdr+0x8c/0x1c0 [ 1184.216761][T16483] ___sys_recvmsg+0x19d/0x890 [ 1184.221605][T16483] do_recvmmsg+0x63a/0x10a0 [ 1184.226370][T16483] __sys_recvmmsg+0x113/0x450 [ 1184.231301][T16483] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1184.238009][T16483] __do_fast_syscall_32+0x87/0xe0 [ 1184.243307][T16483] do_fast_syscall_32+0x33/0x70 [ 1184.248323][T16483] do_SYSENTER_32+0x1b/0x20 [ 1184.253081][T16483] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1184.259636][T16483] [ 1184.262138][T16483] Local variable msg_sys created at: [ 1184.267517][T16483] do_recvmmsg+0x5f/0x10a0 [ 1184.272181][T16483] __sys_recvmmsg+0x113/0x450 09:44:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r0, r1) setsockopt$inet_mtu(r2, 0x0, 0x4, 0x0, 0x0) 09:44:54 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) 09:44:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x28c) 09:44:54 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0]) 09:44:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) 09:44:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xb}]}]}}, &(0x7f0000000640)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 09:44:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001080)={0x4f, {"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", 0x1000}}, 0x1006) 09:44:55 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r1, 0x3, &(0x7f0000001340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000000c0)}, 0x0, 0x0]) 09:44:55 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4029031, 0xffffffffffffffff, 0x10000000) 09:44:56 executing program 5: syz_clone(0x40002000, &(0x7f0000000340), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2d82cddc8c58887839d4823ed8bede9c9ebca0fa7c1953c35b9f5833580e2e62b1f1d3c20e7443ff39a60229d3fb") pselect6(0x40, &(0x7f0000000000)={0x7f, 0x0, 0x800, 0x0, 0x1, 0x8, 0x80000000, 0x4}, &(0x7f0000000040)={0x6, 0x200, 0x0, 0x8e96, 0x2, 0x8e9, 0x3, 0x1}, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) 09:44:56 executing program 4: syz_clone(0x40002000, &(0x7f0000000340), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2d82cddc8c58887839d4823ed8bede9c9ebca0fa7c1953c35b9f5833580e2e62b1f1d3c20e7443ff39a60229d3fbe60aa261d9c11358470d9f2dc664c1c035b483678a04cf2eb71b9f5cebeb215e648424eac606a9dd7054816c04f9fe7a732dc9be2963105d1bf0cd8360249524a6d8a621b91fa0f32110c499f2a208ae433924b2") sched_rr_get_interval(0x0, &(0x7f0000000300)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x8}, &(0x7f0000000040)={0x6, 0x200, 0x0, 0x8e96, 0x2}, &(0x7f0000000080)={0x8, 0x0, 0x5, 0x0, 0x0, 0x40, 0x80, 0x9}, &(0x7f00000000c0)={0x77359400}, &(0x7f00000004c0)={0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 09:44:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000800), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) [ 1186.128654][T16546] not chained 1060000 origins [ 1186.134747][T16546] CPU: 0 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1186.145631][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1186.155838][T16546] Call Trace: [ 1186.159224][T16546] [ 1186.162249][T16546] dump_stack_lvl+0x1c8/0x256 [ 1186.167156][T16546] dump_stack+0x1a/0x1c [ 1186.171499][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1186.177411][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1186.183705][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.189023][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1186.195486][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.200864][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.206852][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.212136][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.218137][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1186.223539][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.228819][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.234818][T16546] ? should_fail+0x3f/0x810 [ 1186.239490][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1186.244765][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.250046][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1186.256639][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.261928][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.267922][T16546] __msan_chain_origin+0xbd/0x140 [ 1186.273165][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.278541][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.283609][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1186.288524][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1186.293355][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.298281][T16546] ? __schedule+0x1609/0x21d0 [ 1186.303123][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.308408][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.314410][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.319691][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1186.325771][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.330538][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1186.336966][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1186.341870][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.348471][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.353291][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1186.358591][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.365014][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.370186][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1186.376241][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.381240][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.385882][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.392430][T16546] RIP: 0023:0xf7faf549 [ 1186.396608][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1186.416391][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1186.424965][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1186.433068][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1186.441161][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1186.449295][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.457390][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1186.465512][T16546] [ 1186.468936][T16546] Uninit was stored to memory at: [ 1186.474332][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.479671][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.484878][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.489742][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.494551][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.499383][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.505943][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.511129][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.516260][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.521120][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.527941][T16546] [ 1186.530352][T16546] Uninit was stored to memory at: [ 1186.535763][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.541182][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.546396][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.551239][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.556042][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.560906][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.567472][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.572801][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.577814][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.582627][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.589192][T16546] [ 1186.591594][T16546] Uninit was stored to memory at: [ 1186.596988][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.602530][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.607589][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.612558][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.617219][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.622276][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 09:44:56 executing program 3: pselect6(0x40, &(0x7f00000000c0)={0x7}, &(0x7f0000000100)={0x1}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) [ 1186.628705][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.634207][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.639252][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.644047][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.650642][T16546] [ 1186.653210][T16546] Uninit was stored to memory at: [ 1186.658467][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.663939][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.669018][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.673996][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.678657][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.683638][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.690058][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.695451][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.700463][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.705258][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.711826][T16546] [ 1186.714372][T16546] Uninit was stored to memory at: [ 1186.719711][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.725155][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.730212][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.735184][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.739845][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.744836][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.751270][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.756601][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.761609][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.766395][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.773088][T16546] [ 1186.775496][T16546] Uninit was stored to memory at: [ 1186.780834][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.786280][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.791349][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.796314][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.800975][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.805946][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.812499][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.817683][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.822863][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.827519][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.834248][T16546] [ 1186.836649][T16546] Uninit was stored to memory at: [ 1186.842073][T16546] __get_compat_msghdr+0x514/0x750 [ 1186.847393][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1186.852640][T16546] ___sys_recvmsg+0x19d/0x890 [ 1186.857499][T16546] do_recvmmsg+0x63a/0x10a0 [ 1186.862317][T16546] __sys_recvmmsg+0x113/0x450 [ 1186.867144][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1186.873777][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1186.878970][T16546] do_fast_syscall_32+0x33/0x70 [ 1186.884182][T16546] do_SYSENTER_32+0x1b/0x20 [ 1186.888836][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1186.895620][T16546] [ 1186.898034][T16546] Local variable msg_sys created at: [ 1186.903589][T16546] do_recvmmsg+0x5f/0x10a0 [ 1186.908160][T16546] __sys_recvmmsg+0x113/0x450 [ 1188.221364][T16541] not chained 1070000 origins [ 1188.226582][T16541] CPU: 0 PID: 16541 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1188.237265][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1188.247463][T16541] Call Trace: [ 1188.250850][T16541] [ 1188.253877][T16541] dump_stack_lvl+0x1c8/0x256 [ 1188.258773][T16541] dump_stack+0x1a/0x1c [ 1188.263117][T16541] kmsan_internal_chain_origin+0x78/0x120 [ 1188.269033][T16541] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1188.275383][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.280682][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1188.287131][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.292430][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.298433][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.303731][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.309734][T16541] ? __get_compat_msghdr+0x5b/0x750 [ 1188.315153][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.320885][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.326983][T16541] ? should_fail+0x3f/0x810 [ 1188.331680][T16541] ? __stack_depot_save+0x21/0x4b0 [ 1188.337003][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.342389][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1188.348833][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.354127][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.360132][T16541] __msan_chain_origin+0xbd/0x140 [ 1188.365334][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.370697][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.375765][T16541] ? ___sys_recvmsg+0xa9/0x890 [ 1188.380684][T16541] ? do_recvmmsg+0x63a/0x10a0 [ 1188.385526][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.390467][T16541] ? __schedule+0x1609/0x21d0 [ 1188.395314][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.400618][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.406623][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.411917][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1188.417934][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.422643][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1188.429099][T16541] ? __sys_recvmmsg+0x52/0x450 [ 1188.434055][T16541] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.440674][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.445522][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1188.450839][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.457286][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.462568][T16541] ? exit_to_user_mode_prepare+0x119/0x220 [ 1188.468563][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.473589][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.478261][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.484932][T16541] RIP: 0023:0xf7fd0549 [ 1188.489135][T16541] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1188.508960][T16541] RSP: 002b:00000000f7faa5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1188.517557][T16541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1188.525769][T16541] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1188.533926][T16541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1188.542041][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.550161][T16541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1188.558302][T16541] [ 1188.565249][T16541] Uninit was stored to memory at: [ 1188.574138][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.579472][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.585011][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.589849][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.594644][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.599910][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.606476][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.611695][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.616853][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.621694][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.628488][T16541] [ 1188.630911][T16541] Uninit was stored to memory at: [ 1188.636402][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.641747][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.646946][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.651798][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.656600][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.661444][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.668028][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.673374][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.678391][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.683189][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.689760][T16541] [ 1188.692385][T16541] Uninit was stored to memory at: [ 1188.697810][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.703269][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.708436][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.713415][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.718094][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.723061][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.729572][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.734902][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.739919][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.744719][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.751288][T16541] [ 1188.753829][T16541] Uninit was stored to memory at: [ 1188.759087][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.764557][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.769624][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.774653][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.779329][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.784309][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.790754][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.796248][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.801266][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.806144][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.812832][T16541] [ 1188.815242][T16541] Uninit was stored to memory at: [ 1188.820492][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.826030][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.831202][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.836238][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.840905][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.845959][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.852524][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.857786][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.863166][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.867845][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.874641][T16541] [ 1188.877042][T16541] Uninit was stored to memory at: [ 1188.882427][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.887757][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.893059][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.897898][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.902841][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.907681][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.914302][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.919509][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.924778][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.929449][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.936261][T16541] [ 1188.938673][T16541] Uninit was stored to memory at: [ 1188.944214][T16541] __get_compat_msghdr+0x514/0x750 [ 1188.949571][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1188.954917][T16541] ___sys_recvmsg+0x19d/0x890 [ 1188.959858][T16541] do_recvmmsg+0x63a/0x10a0 [ 1188.964731][T16541] __sys_recvmmsg+0x113/0x450 [ 1188.969577][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1188.976200][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1188.981392][T16541] do_fast_syscall_32+0x33/0x70 [ 1188.986531][T16541] do_SYSENTER_32+0x1b/0x20 [ 1188.991223][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1188.998002][T16541] [ 1189.000419][T16541] Local variable msg_sys created at: [ 1189.006175][T16541] do_recvmmsg+0x5f/0x10a0 [ 1189.010749][T16541] __sys_recvmmsg+0x113/0x450 [ 1189.768720][T16541] not chained 1080000 origins [ 1189.774330][T16541] CPU: 0 PID: 16541 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1189.785025][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1189.795217][T16541] Call Trace: [ 1189.798605][T16541] [ 1189.801627][T16541] dump_stack_lvl+0x1c8/0x256 [ 1189.806516][T16541] dump_stack+0x1a/0x1c [ 1189.810847][T16541] kmsan_internal_chain_origin+0x78/0x120 [ 1189.816738][T16541] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1189.822991][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.828334][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1189.834758][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.840055][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1189.846038][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.851325][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1189.857307][T16541] ? __get_compat_msghdr+0x5b/0x750 [ 1189.862707][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.867984][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1189.873978][T16541] ? should_fail+0x3f/0x810 [ 1189.878641][T16541] ? __stack_depot_save+0x21/0x4b0 [ 1189.883912][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.889193][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1189.895608][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.900900][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1189.906882][T16541] __msan_chain_origin+0xbd/0x140 [ 1189.912072][T16541] __get_compat_msghdr+0x514/0x750 [ 1189.917401][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1189.922446][T16541] ? ___sys_recvmsg+0xa9/0x890 [ 1189.927354][T16541] ? do_recvmmsg+0x63a/0x10a0 [ 1189.932179][T16541] ___sys_recvmsg+0x19d/0x890 [ 1189.936999][T16541] ? __this_cpu_preempt_check+0x13/0x20 [ 1189.942725][T16541] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1189.948722][T16541] ? do_recvmmsg+0x6e5/0x10a0 [ 1189.953579][T16541] ? kmsan_get_metadata+0xcf/0x220 [ 1189.958872][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1189.964166][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1189.970161][T16541] do_recvmmsg+0x63a/0x10a0 [ 1189.974834][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1189.981342][T16541] ? __sys_recvmmsg+0x52/0x450 [ 1189.986247][T16541] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1189.993023][T16541] __sys_recvmmsg+0x113/0x450 [ 1189.997843][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1190.003130][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.009574][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.014745][T16541] ? exit_to_user_mode_prepare+0x119/0x220 [ 1190.020712][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.025749][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.030478][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.037021][T16541] RIP: 0023:0xf7fd0549 [ 1190.041235][T16541] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1190.061025][T16541] RSP: 002b:00000000f7faa5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1190.069616][T16541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1190.077713][T16541] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1190.085802][T16541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1190.093979][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.102158][T16541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1190.110285][T16541] [ 1190.117387][T16541] Uninit was stored to memory at: [ 1190.123044][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.128382][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.133585][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.138450][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.143245][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.148088][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.154677][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.160047][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.165182][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.169853][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.176548][T16541] [ 1190.178964][T16541] Uninit was stored to memory at: [ 1190.184354][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.189678][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.194868][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.199685][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.204477][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.209308][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.215885][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.221072][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.226224][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.230971][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.237666][T16541] [ 1190.240071][T16541] Uninit was stored to memory at: [ 1190.245441][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.250765][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.255948][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.260783][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.265580][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.270431][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.276990][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.282390][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.287647][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.292436][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.299011][T16541] [ 1190.301417][T16541] Uninit was stored to memory at: [ 1190.306819][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.312270][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.317325][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.322558][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.327213][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.332162][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.338578][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.343910][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.348943][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.353734][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.360315][T16541] [ 1190.362861][T16541] Uninit was stored to memory at: [ 1190.368123][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.373574][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.378653][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.383641][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.388307][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.393276][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.399710][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.405048][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.410070][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.414871][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.421447][T16541] [ 1190.424192][T16541] Uninit was stored to memory at: [ 1190.429526][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.435075][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.440141][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.445120][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.449804][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.454849][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.461283][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.466608][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.471630][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.476430][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.483137][T16541] [ 1190.485550][T16541] Uninit was stored to memory at: [ 1190.491419][T16541] __get_compat_msghdr+0x514/0x750 [ 1190.496948][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1190.502159][T16541] ___sys_recvmsg+0x19d/0x890 [ 1190.507001][T16541] do_recvmmsg+0x63a/0x10a0 [ 1190.511773][T16541] __sys_recvmmsg+0x113/0x450 [ 1190.516797][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1190.523358][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1190.528570][T16541] do_fast_syscall_32+0x33/0x70 [ 1190.533808][T16541] do_SYSENTER_32+0x1b/0x20 [ 1190.538475][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1190.545154][T16541] [ 1190.547568][T16541] Local variable msg_sys created at: [ 1190.553085][T16541] do_recvmmsg+0x5f/0x10a0 [ 1190.557655][T16541] __sys_recvmmsg+0x113/0x450 [ 1191.257067][T16546] not chained 1090000 origins [ 1191.262086][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1191.272761][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1191.283038][T16546] Call Trace: [ 1191.286685][T16546] [ 1191.289711][T16546] dump_stack_lvl+0x1c8/0x256 [ 1191.294608][T16546] dump_stack+0x1a/0x1c [ 1191.298964][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1191.304958][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1191.311226][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.316520][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1191.322979][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.328378][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.334389][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.339679][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.345692][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1191.351101][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.356400][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.362493][T16546] ? should_fail+0x3f/0x810 [ 1191.367176][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1191.372465][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.377753][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1191.384196][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.389502][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.395508][T16546] __msan_chain_origin+0xbd/0x140 [ 1191.400721][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.406104][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.411174][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1191.416096][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1191.420968][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.426037][T16546] ? __schedule+0x1609/0x21d0 [ 1191.430900][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.436291][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.446991][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.452302][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.458330][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.463032][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1191.469568][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1191.474497][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.481103][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.485946][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1191.491259][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.497785][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.502986][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1191.509763][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.514791][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.519564][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.526127][T16546] RIP: 0023:0xf7faf549 [ 1191.530324][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1191.550152][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1191.558745][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1191.566877][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1191.574988][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1191.583114][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.591232][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.599370][T16546] [ 1191.609429][T16546] Uninit was stored to memory at: [ 1191.615514][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.620854][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.626035][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.630873][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.635671][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.640550][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.647089][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.652357][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.657367][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.662204][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.668853][T16546] [ 1191.671259][T16546] Uninit was stored to memory at: [ 1191.676644][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.682040][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.687088][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.692013][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.696672][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.701506][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.708042][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.713317][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.718495][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.723249][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.729817][T16546] [ 1191.732315][T16546] Uninit was stored to memory at: [ 1191.737578][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.743073][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.748136][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.753138][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.757798][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.762786][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.769203][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.774549][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.779579][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.784391][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.790949][T16546] [ 1191.793432][T16546] Uninit was stored to memory at: [ 1191.798687][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.804177][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.809245][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.814242][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.818903][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.823896][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.830328][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.835614][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.840640][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.845460][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.850486][T16541] not chained 1100000 origins [ 1191.852069][T16546] [ 1191.852089][T16546] Uninit was stored to memory at: [ 1191.852252][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.856952][T16541] CPU: 0 PID: 16541 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1191.859283][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.864311][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1191.864364][T16541] Call Trace: [ 1191.864396][T16541] [ 1191.864426][T16541] dump_stack_lvl+0x1c8/0x256 [ 1191.869701][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.880312][T16541] dump_stack+0x1a/0x1c [ 1191.885332][T16546] do_recvmmsg+0x63a/0x10a0 [ 1191.895324][T16541] kmsan_internal_chain_origin+0x78/0x120 [ 1191.898701][T16546] __sys_recvmmsg+0x113/0x450 [ 1191.901667][T16541] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1191.906786][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1191.911433][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1191.915706][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1191.920358][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1191.926167][T16546] do_fast_syscall_32+0x33/0x70 [ 1191.930774][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1191.936913][T16546] do_SYSENTER_32+0x1b/0x20 [ 1191.943086][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.948278][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1191.953332][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1191.953452][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.959681][T16546] [ 1191.959700][T16546] Uninit was stored to memory at: [ 1191.964539][T16541] ? __get_compat_msghdr+0x5b/0x750 [ 1191.964685][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1191.969907][T16546] __get_compat_msghdr+0x514/0x750 [ 1191.974289][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1191.980183][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1191.986526][T16541] ? should_fail+0x3f/0x810 [ 1191.991738][T16546] ___sys_recvmsg+0x19d/0x890 [ 1191.997558][T16541] ? __stack_depot_save+0x21/0x4b0 [ 1191.997674][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1191.999983][T16546] do_recvmmsg+0x63a/0x10a0 [ 1192.005092][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1192.005631][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1192.010818][T16546] __sys_recvmmsg+0x113/0x450 [ 1192.016187][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.016317][T16541] __msan_chain_origin+0xbd/0x140 [ 1192.021424][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.027245][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.032286][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1192.036749][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.041398][T16546] do_fast_syscall_32+0x33/0x70 [ 1192.046524][T16541] ? ___sys_recvmsg+0xa9/0x890 [ 1192.046619][T16541] ? do_recvmmsg+0x63a/0x10a0 [ 1192.051983][T16546] do_SYSENTER_32+0x1b/0x20 [ 1192.056440][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.062792][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.067804][T16541] ? __schedule+0x1609/0x21d0 [ 1192.072549][T16546] [ 1192.078288][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1192.083480][T16546] Uninit was stored to memory at: [ 1192.089649][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.094982][T16546] __get_compat_msghdr+0x514/0x750 [ 1192.099795][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1192.104734][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1192.109520][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.114399][T16546] ___sys_recvmsg+0x19d/0x890 [ 1192.118977][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.123566][T16546] do_recvmmsg+0x63a/0x10a0 [ 1192.128205][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1192.134597][T16546] __sys_recvmmsg+0x113/0x450 [ 1192.139209][T16541] ? __sys_recvmmsg+0x52/0x450 [ 1192.141529][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.146641][T16541] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.146767][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.151764][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1192.157646][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1192.162883][T16546] do_fast_syscall_32+0x33/0x70 [ 1192.167901][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.172819][T16546] do_SYSENTER_32+0x1b/0x20 [ 1192.178575][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.183326][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.187750][T16541] ? exit_to_user_mode_prepare+0x119/0x220 [ 1192.192335][T16546] [ 1192.198504][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.203267][T16546] Local variable msg_sys created at: [ 1192.207966][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.214317][T16546] do_recvmmsg+0x5f/0x10a0 [ 1192.220625][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.225384][T16546] __sys_recvmmsg+0x113/0x450 [ 1192.230330][T16541] RIP: 0023:0xf7fd0549 [ 1192.308715][T16541] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1192.328531][T16541] RSP: 002b:00000000f7faa5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1192.337117][T16541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1192.345239][T16541] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1192.353343][T16541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1192.361459][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.369573][T16541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1192.377795][T16541] [ 1192.384731][T16541] Uninit was stored to memory at: [ 1192.389999][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.395840][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.400891][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.405839][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.410529][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.415469][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.421987][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.427175][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.432289][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.436944][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.443611][T16541] [ 1192.446014][T16541] Uninit was stored to memory at: [ 1192.451262][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.456706][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.461995][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.466836][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.471494][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.476462][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.483009][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.488202][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.493324][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.497983][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.504661][T16541] [ 1192.507072][T16541] Uninit was stored to memory at: [ 1192.512472][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.517784][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.522958][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.527894][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.532672][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.537593][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.544148][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.549338][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.554487][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.559149][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.565827][T16541] [ 1192.568231][T16541] Uninit was stored to memory at: [ 1192.573608][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.578928][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.584136][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.588967][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.593750][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.598584][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.605126][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.610311][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.615782][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.620443][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.627141][T16541] [ 1192.629544][T16541] Uninit was stored to memory at: [ 1192.634961][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.640291][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.645464][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.650291][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.655073][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.659910][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.666464][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.671658][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.676886][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.681545][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.685543][T16546] not chained 1110000 origins [ 1192.688175][T16541] [ 1192.693206][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1192.695161][T16541] Uninit was stored to memory at: [ 1192.695324][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.705750][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1192.705802][T16546] Call Trace: [ 1192.705836][T16546] [ 1192.705867][T16546] dump_stack_lvl+0x1c8/0x256 [ 1192.710894][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.716024][T16546] dump_stack+0x1a/0x1c [ 1192.716155][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1192.726294][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.729771][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1192.732830][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.737420][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.742375][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.746432][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1192.752276][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.756861][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.763033][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.767447][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.772666][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.777247][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.783608][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.789758][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.794997][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.799933][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1192.805867][T16541] [ 1192.810608][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.815831][T16541] Uninit was stored to memory at: [ 1192.820233][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.826282][T16541] __get_compat_msghdr+0x514/0x750 [ 1192.832386][T16546] ? should_fail+0x3f/0x810 [ 1192.832506][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1192.837767][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1192.840108][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.845332][T16541] ___sys_recvmsg+0x19d/0x890 [ 1192.850336][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1192.856253][T16541] do_recvmmsg+0x63a/0x10a0 [ 1192.861269][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.865875][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.870894][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.875858][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1192.880892][T16546] __msan_chain_origin+0xbd/0x140 [ 1192.885782][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1192.892003][T16546] __get_compat_msghdr+0x514/0x750 [ 1192.896699][T16541] do_fast_syscall_32+0x33/0x70 [ 1192.901932][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1192.906739][T16541] do_SYSENTER_32+0x1b/0x20 [ 1192.912555][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1192.912657][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1192.918913][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1192.923950][T16546] ___sys_recvmsg+0x19d/0x890 [ 1192.924060][T16546] ? __schedule+0x1609/0x21d0 [ 1192.929365][T16541] [ 1192.929386][T16541] Local variable msg_sys created at: [ 1192.934497][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.934622][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.939446][T16541] do_recvmmsg+0x5f/0x10a0 [ 1192.944325][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1192.944443][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1192.948938][T16541] __sys_recvmmsg+0x113/0x450 [ 1192.953718][T16546] do_recvmmsg+0x63a/0x10a0 [ 1192.953841][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1193.026461][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1193.031398][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.038106][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.043126][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.048523][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.054983][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.060265][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1193.066261][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.071285][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.075952][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.082517][T16546] RIP: 0023:0xf7faf549 [ 1193.086718][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1193.106543][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1193.115140][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1193.123252][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1193.131447][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1193.139557][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.147718][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1193.155857][T16546] [ 1193.165911][T16546] Uninit was stored to memory at: [ 1193.171735][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.177223][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.182369][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.187198][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.191848][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.196782][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.203350][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.208539][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.213683][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.218603][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.226581][T16546] [ 1193.228983][T16546] Uninit was stored to memory at: [ 1193.234338][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.239769][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.244921][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.249776][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.254613][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.259447][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.265962][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.271148][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.276245][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.280890][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.287659][T16546] [ 1193.290067][T16546] Uninit was stored to memory at: [ 1193.295416][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.300745][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.305975][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.310831][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.315687][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.320522][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.327078][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.333230][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.338245][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.343175][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.349745][T16546] [ 1193.352238][T16546] Uninit was stored to memory at: [ 1193.357487][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.362909][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.367967][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.372911][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.377571][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.382553][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.388978][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.394414][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.399433][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.404269][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.410830][T16546] [ 1193.413383][T16546] Uninit was stored to memory at: [ 1193.418628][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.424040][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.429204][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.434198][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.438861][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.443848][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.450411][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.455838][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.460861][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.465767][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.472420][T16546] [ 1193.474912][T16546] Uninit was stored to memory at: [ 1193.480188][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.485660][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.490813][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.495914][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.500572][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.505579][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.512086][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.517287][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.522439][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.527093][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.533752][T16546] [ 1193.536163][T16546] Uninit was stored to memory at: [ 1193.541406][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.546894][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.552043][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.556879][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.561545][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.566559][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.573437][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.578629][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.583791][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.588454][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.595167][T16546] [ 1193.597577][T16546] Local variable msg_sys created at: [ 1193.603113][T16546] do_recvmmsg+0x5f/0x10a0 [ 1193.607686][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.651854][T16546] not chained 1120000 origins [ 1193.656826][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1193.667533][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1193.677813][T16546] Call Trace: [ 1193.681197][T16546] [ 1193.684224][T16546] dump_stack_lvl+0x1c8/0x256 [ 1193.689118][T16546] dump_stack+0x1a/0x1c [ 1193.693466][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1193.699373][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1193.705643][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.710940][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1193.717549][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.722843][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.728845][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.734145][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.740133][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1193.745544][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.750840][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.756847][T16546] ? should_fail+0x3f/0x810 [ 1193.761532][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1193.766814][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.772113][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1193.778539][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.783828][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.789909][T16546] __msan_chain_origin+0xbd/0x140 [ 1193.795118][T16546] __get_compat_msghdr+0x514/0x750 [ 1193.800473][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1193.805533][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1193.810450][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1193.815289][T16546] ___sys_recvmsg+0x19d/0x890 [ 1193.820139][T16546] ? __schedule+0x1609/0x21d0 [ 1193.825092][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.830384][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.836380][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.841667][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1193.848018][T16546] do_recvmmsg+0x63a/0x10a0 [ 1193.852715][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1193.859167][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1193.864102][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.870707][T16546] __sys_recvmmsg+0x113/0x450 [ 1193.875545][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1193.880946][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1193.887392][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1193.892586][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1193.898579][T16546] do_fast_syscall_32+0x33/0x70 [ 1193.903593][T16546] do_SYSENTER_32+0x1b/0x20 [ 1193.908255][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1193.914813][T16546] RIP: 0023:0xf7faf549 [ 1193.919015][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1193.938827][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1193.947421][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1193.955537][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1193.963643][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1193.971747][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.979850][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1193.987990][T16546] [ 1193.998087][T16546] Uninit was stored to memory at: [ 1194.004776][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.010113][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.015673][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.020504][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.025269][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.030108][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.036626][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.041816][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.046943][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.051598][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.058256][T16546] [ 1194.060688][T16546] Uninit was stored to memory at: [ 1194.066151][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.071475][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.076679][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.081516][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.086274][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.091117][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.097692][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.102980][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.107995][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.112841][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.119405][T16546] [ 1194.121804][T16546] Uninit was stored to memory at: [ 1194.127220][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.132674][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.137730][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.142659][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.147318][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.152237][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.158658][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.164014][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.169046][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.173793][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.180361][T16546] [ 1194.182944][T16546] Uninit was stored to memory at: [ 1194.188197][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.193596][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.198661][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.203583][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.208243][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.213174][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.219690][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.224978][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.229985][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.234733][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.241294][T16546] [ 1194.243814][T16546] Uninit was stored to memory at: [ 1194.249066][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.254555][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.259607][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.264528][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.269180][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.274107][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.280534][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.285846][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.290960][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.295711][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.302363][T16546] [ 1194.304768][T16546] Uninit was stored to memory at: [ 1194.310029][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.315524][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.320569][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.325594][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.330293][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.335320][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.341760][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.347210][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.352406][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.357061][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.363780][T16546] [ 1194.366226][T16546] Uninit was stored to memory at: [ 1194.371483][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.376967][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.382644][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.387566][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.392449][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.397277][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.403802][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.409016][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.414213][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.418903][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.425632][T16546] [ 1194.428041][T16546] Local variable msg_sys created at: [ 1194.433584][T16546] do_recvmmsg+0x5f/0x10a0 [ 1194.438164][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.468017][T16546] not chained 1130000 origins [ 1194.472983][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1194.483663][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1194.493857][T16546] Call Trace: [ 1194.497235][T16546] [ 1194.500268][T16546] dump_stack_lvl+0x1c8/0x256 [ 1194.505192][T16546] dump_stack+0x1a/0x1c [ 1194.509553][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1194.515734][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1194.522006][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.527402][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1194.534027][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.539325][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.545426][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.550724][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.556722][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1194.562133][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.567508][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.573514][T16546] ? should_fail+0x3f/0x810 [ 1194.578197][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1194.583493][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.588883][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1194.595321][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.600618][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.606621][T16546] __msan_chain_origin+0xbd/0x140 [ 1194.611827][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.617181][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.622242][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1194.627168][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1194.632001][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.636922][T16546] ? _raw_spin_unlock+0x25/0x40 [ 1194.641959][T16546] ? __schedule+0x1035/0x21d0 [ 1194.646801][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.652090][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.662182][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.667491][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1194.673507][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.678373][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1194.684835][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1194.689762][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.696375][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.701210][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1194.706605][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.713050][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.718239][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1194.724232][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.729252][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.733911][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.740479][T16546] RIP: 0023:0xf7faf549 [ 1194.744670][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1194.764663][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1194.773249][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1194.781355][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1194.789467][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.797660][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.805792][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.813933][T16546] [ 1194.824147][T16546] Uninit was stored to memory at: [ 1194.829424][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.835435][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.840499][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.845434][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.850093][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.855007][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.861426][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.866716][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.871728][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.876467][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.883133][T16546] [ 1194.885535][T16546] Uninit was stored to memory at: [ 1194.890783][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.896206][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.901256][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.906267][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.910926][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.915861][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.922379][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.927566][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.932661][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.937315][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1194.943966][T16546] [ 1194.946361][T16546] Uninit was stored to memory at: [ 1194.951606][T16546] __get_compat_msghdr+0x514/0x750 [ 1194.957191][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1194.962336][T16546] ___sys_recvmsg+0x19d/0x890 [ 1194.967165][T16546] do_recvmmsg+0x63a/0x10a0 [ 1194.971829][T16546] __sys_recvmmsg+0x113/0x450 [ 1194.976762][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1194.983291][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1194.988485][T16546] do_fast_syscall_32+0x33/0x70 [ 1194.993709][T16546] do_SYSENTER_32+0x1b/0x20 [ 1194.998366][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.005094][T16546] [ 1195.007503][T16546] Uninit was stored to memory at: [ 1195.012914][T16546] __get_compat_msghdr+0x514/0x750 [ 1195.018236][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1195.023459][T16546] ___sys_recvmsg+0x19d/0x890 [ 1195.028295][T16546] do_recvmmsg+0x63a/0x10a0 [ 1195.033123][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.037960][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.044564][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1195.049754][T16546] do_fast_syscall_32+0x33/0x70 [ 1195.054942][T16546] do_SYSENTER_32+0x1b/0x20 [ 1195.059603][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.066360][T16546] [ 1195.068774][T16546] Uninit was stored to memory at: [ 1195.074192][T16546] __get_compat_msghdr+0x514/0x750 [ 1195.079516][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1195.084732][T16546] ___sys_recvmsg+0x19d/0x890 [ 1195.089568][T16546] do_recvmmsg+0x63a/0x10a0 [ 1195.093870][T16541] not chained 1140000 origins [ 1195.094324][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.098880][T16541] CPU: 0 PID: 16541 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1195.103640][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.114058][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1195.114117][T16541] Call Trace: [ 1195.114149][T16541] [ 1195.120380][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1195.130464][T16541] dump_stack_lvl+0x1c8/0x256 [ 1195.133915][T16546] do_fast_syscall_32+0x33/0x70 [ 1195.136790][T16541] dump_stack+0x1a/0x1c [ 1195.141803][T16546] do_SYSENTER_32+0x1b/0x20 [ 1195.146489][T16541] kmsan_internal_chain_origin+0x78/0x120 [ 1195.151340][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.155505][T16541] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1195.155632][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.160105][T16546] [ 1195.160124][T16546] Uninit was stored to memory at: [ 1195.165916][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1195.172547][T16546] __get_compat_msghdr+0x514/0x750 [ 1195.178503][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.183687][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1195.185944][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.190975][T16546] ___sys_recvmsg+0x19d/0x890 [ 1195.197221][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.197337][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.202541][T16546] do_recvmmsg+0x63a/0x10a0 [ 1195.207581][T16541] ? __get_compat_msghdr+0x5b/0x750 [ 1195.212512][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.218247][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.223007][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.228042][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.233932][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1195.238369][T16541] ? should_fail+0x3f/0x810 [ 1195.243678][T16546] do_fast_syscall_32+0x33/0x70 [ 1195.248245][T16541] ? __stack_depot_save+0x21/0x4b0 [ 1195.253440][T16546] do_SYSENTER_32+0x1b/0x20 [ 1195.259618][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.265508][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.270455][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1195.275039][T16546] [ 1195.279908][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.285119][T16546] Uninit was stored to memory at: [ 1195.289551][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.289677][T16541] __msan_chain_origin+0xbd/0x140 [ 1195.295007][T16546] __get_compat_msghdr+0x514/0x750 [ 1195.301098][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.307419][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1195.309700][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.314866][T16546] ___sys_recvmsg+0x19d/0x890 [ 1195.319820][T16541] ? ___sys_recvmsg+0xa9/0x890 [ 1195.325721][T16546] do_recvmmsg+0x63a/0x10a0 [ 1195.330676][T16541] ? do_recvmmsg+0x63a/0x10a0 [ 1195.335880][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.340925][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.345891][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.350653][T16541] ? __schedule+0x1609/0x21d0 [ 1195.355444][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1195.360113][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.364699][T16546] do_fast_syscall_32+0x33/0x70 [ 1195.369294][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.374103][T16546] do_SYSENTER_32+0x1b/0x20 [ 1195.378705][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.385031][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.389630][T16541] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.394768][T16546] [ 1195.399798][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.404725][T16546] Local variable msg_sys created at: [ 1195.410482][T16541] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1195.415036][T16546] do_recvmmsg+0x5f/0x10a0 [ 1195.420087][T16541] ? __sys_recvmmsg+0x52/0x450 [ 1195.426495][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.432226][T16541] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.474234][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.479131][T16541] ? kmsan_get_metadata+0x33/0x220 [ 1195.484452][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.490915][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.496116][T16541] ? exit_to_user_mode_prepare+0x119/0x220 [ 1195.502106][T16541] do_fast_syscall_32+0x33/0x70 [ 1195.507122][T16541] do_SYSENTER_32+0x1b/0x20 [ 1195.511787][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.518347][T16541] RIP: 0023:0xf7fd0549 [ 1195.522540][T16541] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1195.542351][T16541] RSP: 002b:00000000f7faa5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1195.551047][T16541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 1195.559168][T16541] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1195.567273][T16541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1195.575377][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.583475][T16541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.591605][T16541] [ 1195.604871][T16541] Uninit was stored to memory at: [ 1195.610148][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.617289][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.622471][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.627301][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.632078][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.636994][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.643540][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.648724][T16541] do_fast_syscall_32+0x33/0x70 [ 1195.653920][T16541] do_SYSENTER_32+0x1b/0x20 [ 1195.658582][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.665257][T16541] [ 1195.667660][T16541] Uninit was stored to memory at: [ 1195.672978][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.678302][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.683486][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.688321][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.693115][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.697954][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.704502][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.709693][T16541] do_fast_syscall_32+0x33/0x70 [ 1195.714815][T16541] do_SYSENTER_32+0x1b/0x20 [ 1195.719470][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.726144][T16541] [ 1195.728557][T16541] Uninit was stored to memory at: [ 1195.733918][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.739269][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.744436][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.749273][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.754043][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.758870][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.765417][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.770601][T16541] do_fast_syscall_32+0x33/0x70 [ 1195.772473][T16546] not chained 1150000 origins [ 1195.775658][T16541] do_SYSENTER_32+0x1b/0x20 [ 1195.780324][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1195.784935][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.795328][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1195.795386][T16546] Call Trace: [ 1195.795418][T16546] [ 1195.795451][T16546] dump_stack_lvl+0x1c8/0x256 [ 1195.801763][T16541] [ 1195.801783][T16541] Uninit was stored to memory at: [ 1195.811848][T16546] dump_stack+0x1a/0x1c [ 1195.811979][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1195.815429][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.818248][T16546] ? up_read+0x36/0x1c0 [ 1195.823034][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.825270][T16546] ? do_user_addr_fault+0xfef/0x1710 [ 1195.830279][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.834471][T16546] ? exc_page_fault+0x6d/0x140 [ 1195.840270][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.845396][T16546] ? asm_exc_page_fault+0x27/0x30 [ 1195.849661][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.854520][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1195.854640][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1195.859912][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.864597][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1195.864715][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.869461][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.873976][T16546] __msan_chain_origin+0xbd/0x140 [ 1195.874095][T16546] __get_compat_msghdr+0x514/0x750 [ 1195.879109][T16541] do_fast_syscall_32+0x33/0x70 [ 1195.883820][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1195.889023][T16541] do_SYSENTER_32+0x1b/0x20 [ 1195.895276][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1195.895373][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1195.901625][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1195.906755][T16546] ___sys_recvmsg+0x19d/0x890 [ 1195.906868][T16546] ? __schedule+0x1609/0x21d0 [ 1195.912764][T16541] [ 1195.917709][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1195.922831][T16541] Uninit was stored to memory at: [ 1195.927849][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.932936][T16541] __get_compat_msghdr+0x514/0x750 [ 1195.937571][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1195.942182][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1195.946857][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1195.951620][T16541] ___sys_recvmsg+0x19d/0x890 [ 1195.957962][T16546] do_recvmmsg+0x63a/0x10a0 [ 1195.958086][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1195.962846][T16541] do_recvmmsg+0x63a/0x10a0 [ 1195.967439][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1195.969777][T16541] __sys_recvmmsg+0x113/0x450 [ 1195.974976][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.975105][T16546] __sys_recvmmsg+0x113/0x450 [ 1195.980114][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.985925][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1195.986059][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1195.991146][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1195.996303][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1195.996407][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1196.001241][T16541] do_fast_syscall_32+0x33/0x70 [ 1196.007057][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.007160][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.011835][T16541] do_SYSENTER_32+0x1b/0x20 [ 1196.016343][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.022689][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.027092][T16546] RIP: 0023:0xf7faf549 [ 1196.031858][T16541] [ 1196.036543][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1196.043082][T16541] Uninit was stored to memory at: [ 1196.047651][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 [ 1196.054142][T16541] __get_compat_msghdr+0x514/0x750 [ 1196.059010][T16546] ORIG_RAX: 0000000000000151 [ 1196.059047][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1196.065361][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1196.070286][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1196.075417][T16541] ___sys_recvmsg+0x19d/0x890 [ 1196.081137][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1196.086096][T16541] do_recvmmsg+0x63a/0x10a0 [ 1196.090845][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.095457][T16541] __sys_recvmmsg+0x113/0x450 [ 1196.099860][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1196.106292][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.112550][T16546] [ 1196.119227][T16546] Uninit was stored to memory at: [ 1196.138849][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1196.138953][T16541] do_fast_syscall_32+0x33/0x70 [ 1196.139049][T16541] do_SYSENTER_32+0x1b/0x20 [ 1196.139136][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.139294][T16541] [ 1196.139310][T16541] Uninit was stored to memory at: [ 1196.139464][T16541] __get_compat_msghdr+0x514/0x750 [ 1196.144694][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.150682][T16541] get_compat_msghdr+0x8c/0x1c0 [ 1196.155882][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.160587][T16541] ___sys_recvmsg+0x19d/0x890 [ 1196.168652][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.173628][T16541] do_recvmmsg+0x63a/0x10a0 [ 1196.181587][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.186543][T16541] __sys_recvmmsg+0x113/0x450 [ 1196.194590][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.199149][T16541] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.207210][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.212017][T16541] __do_fast_syscall_32+0x87/0xe0 [ 1196.220172][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.226520][T16541] do_fast_syscall_32+0x33/0x70 [ 1196.229543][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.234680][T16541] do_SYSENTER_32+0x1b/0x20 [ 1196.239689][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.244645][T16541] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.249128][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.255562][T16541] [ 1196.257892][T16546] [ 1196.257909][T16546] Uninit was stored to memory at: [ 1196.263031][T16541] Local variable msg_sys created at: [ 1196.268253][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.273330][T16541] do_recvmmsg+0x5f/0x10a0 [ 1196.278159][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.283125][T16541] __sys_recvmmsg+0x113/0x450 [ 1196.287836][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.409920][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.414691][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.419523][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.426041][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.431235][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.436336][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.441022][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.447664][T16546] [ 1196.450187][T16546] Uninit was stored to memory at: [ 1196.455534][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.460862][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.466017][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.470849][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.475594][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.480419][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.486922][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.492196][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.497196][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.501848][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.508504][T16546] [ 1196.510913][T16546] Uninit was stored to memory at: [ 1196.516357][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.521678][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.526839][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.531682][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.536435][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.541271][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.547782][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.553059][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.558327][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.563080][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.569758][T16546] [ 1196.572259][T16546] Uninit was stored to memory at: [ 1196.577513][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.582920][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.587975][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.592906][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.597567][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.602488][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.608904][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.614185][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.619194][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.623944][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.630519][T16546] [ 1196.633031][T16546] Uninit was stored to memory at: [ 1196.638276][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.643707][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.648767][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.653689][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.658345][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.663394][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1196.669824][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.675197][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.680206][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.684957][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.691516][T16546] [ 1196.694017][T16546] Uninit was stored to memory at: [ 1196.699269][T16546] __get_compat_msghdr+0x514/0x750 [ 1196.704682][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1196.709743][T16546] ___sys_recvmsg+0x19d/0x890 [ 1196.714667][T16546] do_recvmmsg+0x63a/0x10a0 [ 1196.719321][T16546] __sys_recvmmsg+0x113/0x450 [ 1196.724267][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 09:45:06 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x1e, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0xc) 09:45:06 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, 0x0, 0x0) 09:45:06 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 1196.730687][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1196.735970][T16546] do_fast_syscall_32+0x33/0x70 [ 1196.740997][T16546] do_SYSENTER_32+0x1b/0x20 [ 1196.745749][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1196.752394][T16546] [ 1196.754803][T16546] Local variable msg_sys created at: [ 1196.760202][T16546] do_recvmmsg+0x5f/0x10a0 [ 1196.764952][T16546] __sys_recvmmsg+0x113/0x450 [ 1197.440424][T16546] not chained 1160000 origins [ 1197.445847][T16546] CPU: 0 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1197.456539][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1197.466728][T16546] Call Trace: [ 1197.470057][T16546] [ 1197.473034][T16546] dump_stack_lvl+0x1c8/0x256 [ 1197.477864][T16546] dump_stack+0x1a/0x1c [ 1197.482220][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1197.488129][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1197.494311][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.499522][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1197.505893][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.511192][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.517173][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.522398][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.528334][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1197.533708][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.538931][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.544846][T16546] ? should_fail+0x3f/0x810 [ 1197.549456][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1197.554685][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.559980][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1197.566424][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.571643][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.577582][T16546] __msan_chain_origin+0xbd/0x140 [ 1197.582795][T16546] __get_compat_msghdr+0x514/0x750 [ 1197.588115][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1197.594727][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1197.599570][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1197.604362][T16546] ___sys_recvmsg+0x19d/0x890 [ 1197.609215][T16546] ? __schedule+0x1609/0x21d0 [ 1197.614041][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.619257][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.625263][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.630566][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1197.636478][T16546] do_recvmmsg+0x63a/0x10a0 [ 1197.641081][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1197.647427][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1197.652294][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1197.658890][T16546] __sys_recvmmsg+0x113/0x450 [ 1197.663720][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1197.668995][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1197.675342][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1197.680477][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1197.686490][T16546] do_fast_syscall_32+0x33/0x70 [ 1197.691936][T16546] do_SYSENTER_32+0x1b/0x20 [ 1197.696540][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1197.703018][T16546] RIP: 0023:0xf7faf549 [ 1197.707211][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1197.726986][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1197.735487][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1197.743530][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1197.751580][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.759656][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.767793][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.775850][T16546] [ 1197.789203][T16546] Uninit was stored to memory at: [ 1197.796375][T16546] __get_compat_msghdr+0x514/0x750 [ 1197.801721][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1197.806933][T16546] ___sys_recvmsg+0x19d/0x890 [ 1197.811774][T16546] do_recvmmsg+0x63a/0x10a0 [ 1197.816560][T16546] __sys_recvmmsg+0x113/0x450 [ 1197.821390][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1197.827964][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1197.833272][T16546] do_fast_syscall_32+0x33/0x70 [ 1197.838280][T16546] do_SYSENTER_32+0x1b/0x20 [ 1197.843065][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1197.849616][T16546] [ 1197.852183][T16546] Uninit was stored to memory at: [ 1197.857367][T16546] __get_compat_msghdr+0x514/0x750 [ 1197.865896][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1197.871305][T16546] ___sys_recvmsg+0x19d/0x890 [ 1197.876491][T16546] do_recvmmsg+0x63a/0x10a0 [ 1197.881219][T16546] __sys_recvmmsg+0x113/0x450 [ 1197.886199][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1197.892778][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1197.897968][T16546] do_fast_syscall_32+0x33/0x70 [ 1197.903182][T16546] do_SYSENTER_32+0x1b/0x20 [ 1197.908006][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1197.914707][T16546] [ 1197.917349][T16546] Uninit was stored to memory at: [ 1197.922889][T16546] __get_compat_msghdr+0x514/0x750 [ 1197.928189][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1197.933392][T16546] ___sys_recvmsg+0x19d/0x890 [ 1197.938235][T16546] do_recvmmsg+0x63a/0x10a0 [ 1197.943087][T16546] __sys_recvmmsg+0x113/0x450 [ 1197.947931][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1197.954553][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1197.959768][T16546] do_fast_syscall_32+0x33/0x70 [ 1197.965112][T16546] do_SYSENTER_32+0x1b/0x20 [ 1197.969839][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1197.976555][T16546] [ 1197.978954][T16546] Uninit was stored to memory at: [ 1197.984378][T16546] __get_compat_msghdr+0x514/0x750 [ 1197.989704][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1197.994949][T16546] ___sys_recvmsg+0x19d/0x890 [ 1197.999790][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.004589][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.009428][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.015985][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.021148][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.026387][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.031031][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.037700][T16546] [ 1198.040088][T16546] Uninit was stored to memory at: [ 1198.045527][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.050837][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.056152][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.061052][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.065875][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.070689][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.077183][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.082494][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.087481][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.092252][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.098834][T16546] [ 1198.101250][T16546] Uninit was stored to memory at: [ 1198.106674][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.112109][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.117188][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.122168][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.126825][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.131667][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.138192][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.143521][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.148537][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.153385][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.159924][T16546] [ 1198.162514][T16546] Uninit was stored to memory at: [ 1198.167736][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.173191][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.178259][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.183293][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.187949][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.192929][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.199358][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.204846][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.209847][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.214679][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.221219][T16546] [ 1198.223766][T16546] Local variable msg_sys created at: [ 1198.229129][T16546] do_recvmmsg+0x5f/0x10a0 [ 1198.233857][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.528531][T16546] not chained 1170000 origins [ 1198.533638][T16546] CPU: 0 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1198.544316][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1198.554538][T16546] Call Trace: [ 1198.557940][T16546] [ 1198.560989][T16546] dump_stack_lvl+0x1c8/0x256 [ 1198.565896][T16546] dump_stack+0x1a/0x1c [ 1198.570238][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1198.576154][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1198.582433][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.587722][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1198.594251][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.599727][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.605739][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.611065][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.617084][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1198.622512][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.627813][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.633830][T16546] ? should_fail+0x3f/0x810 [ 1198.638521][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1198.644003][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.649402][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1198.655925][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.661217][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.667474][T16546] __msan_chain_origin+0xbd/0x140 [ 1198.672803][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.678164][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.683221][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1198.688145][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1198.693092][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.697959][T16546] ? __schedule+0x1609/0x21d0 [ 1198.702810][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.708109][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.714111][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.719749][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1198.725757][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.730451][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1198.736898][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1198.741839][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.748444][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.753279][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1198.758698][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.765145][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.770419][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1198.776422][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.781524][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.786186][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.792832][T16546] RIP: 0023:0xf7faf549 [ 1198.797030][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1198.817100][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1198.825682][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1198.833886][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1198.841987][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.850091][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.858197][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.866357][T16546] [ 1198.873238][T16546] Uninit was stored to memory at: [ 1198.878518][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.884401][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.889464][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.894428][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.899185][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.904161][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.910609][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.915930][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.920943][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.925731][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.932424][T16546] [ 1198.934829][T16546] Uninit was stored to memory at: [ 1198.940268][T16546] __get_compat_msghdr+0x514/0x750 [ 1198.946491][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1198.951560][T16546] ___sys_recvmsg+0x19d/0x890 [ 1198.956513][T16546] do_recvmmsg+0x63a/0x10a0 [ 1198.961433][T16546] __sys_recvmmsg+0x113/0x450 [ 1198.966391][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1198.973000][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1198.978187][T16546] do_fast_syscall_32+0x33/0x70 [ 1198.983309][T16546] do_SYSENTER_32+0x1b/0x20 [ 1198.987963][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1198.994644][T16546] [ 1198.997049][T16546] Uninit was stored to memory at: [ 1199.002405][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.007718][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.012893][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.017746][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.022813][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.027741][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.034288][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.039563][T16546] do_fast_syscall_32+0x33/0x70 [ 1199.044781][T16546] do_SYSENTER_32+0x1b/0x20 [ 1199.049440][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1199.056110][T16546] [ 1199.058514][T16546] Uninit was stored to memory at: [ 1199.064051][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.069377][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.074736][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.079757][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.085253][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.090099][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.096899][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.102649][T16546] do_fast_syscall_32+0x33/0x70 [ 1199.107660][T16546] do_SYSENTER_32+0x1b/0x20 [ 1199.112491][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1199.119044][T16546] [ 1199.121447][T16546] Uninit was stored to memory at: [ 1199.126831][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.132286][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.137351][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.142361][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.147025][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.152039][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.158625][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.164011][T16546] do_fast_syscall_32+0x33/0x70 [ 1199.169065][T16546] do_SYSENTER_32+0x1b/0x20 [ 1199.173999][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1199.180554][T16546] [ 1199.183232][T16546] Uninit was stored to memory at: [ 1199.188501][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.193952][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.199012][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.204038][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.208751][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.213869][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.220325][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.225657][T16546] do_fast_syscall_32+0x33/0x70 [ 1199.230671][T16546] do_SYSENTER_32+0x1b/0x20 [ 1199.235547][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1199.242225][T16546] [ 1199.244646][T16546] Uninit was stored to memory at: [ 1199.249901][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.255400][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.260544][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.265586][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.270244][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.275356][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.281781][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.287178][T16546] do_fast_syscall_32+0x33/0x70 [ 1199.292395][T16546] do_SYSENTER_32+0x1b/0x20 [ 1199.297082][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1199.303838][T16546] [ 1199.306252][T16546] Local variable msg_sys created at: [ 1199.311811][T16546] do_recvmmsg+0x5f/0x10a0 [ 1199.316646][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.745108][T16546] not chained 1180000 origins [ 1199.749967][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1199.760646][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1199.770846][T16546] Call Trace: [ 1199.774226][T16546] [ 1199.777255][T16546] dump_stack_lvl+0x1c8/0x256 [ 1199.782154][T16546] dump_stack+0x1a/0x1c [ 1199.786497][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1199.792587][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1199.798930][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.804218][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1199.810661][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.815953][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.821949][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.827319][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.833355][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1199.838771][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.844118][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.850124][T16546] ? should_fail+0x3f/0x810 [ 1199.854803][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1199.860096][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.865393][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1199.871825][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.877125][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.883124][T16546] __msan_chain_origin+0xbd/0x140 [ 1199.888327][T16546] __get_compat_msghdr+0x514/0x750 [ 1199.893772][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1199.898832][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1199.903751][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1199.908594][T16546] ___sys_recvmsg+0x19d/0x890 [ 1199.913433][T16546] ? _raw_spin_unlock+0x25/0x40 [ 1199.918647][T16546] ? __schedule+0x1035/0x21d0 [ 1199.923575][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.928869][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.934861][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.940160][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1199.946261][T16546] do_recvmmsg+0x63a/0x10a0 [ 1199.950958][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1199.957401][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1199.962319][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.968927][T16546] __sys_recvmmsg+0x113/0x450 [ 1199.973757][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1199.979065][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1199.985508][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1199.990955][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1199.996940][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.001948][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.006604][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.013166][T16546] RIP: 0023:0xf7faf549 [ 1200.017360][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1200.037166][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1200.045766][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1200.053882][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1200.061985][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1200.070088][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.078212][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.086437][T16546] [ 1200.096525][T16546] Uninit was stored to memory at: [ 1200.102663][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.107987][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.113131][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.117958][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.122789][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.127616][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.134134][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.139422][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.144511][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.149166][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.155829][T16546] [ 1200.158235][T16546] Uninit was stored to memory at: [ 1200.163594][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.168980][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.174163][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.178993][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.183742][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.188583][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.195121][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.200306][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.205440][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.210109][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.216774][T16546] [ 1200.219353][T16546] Uninit was stored to memory at: [ 1200.224700][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.230061][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.235216][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.240061][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.244821][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.249657][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.256239][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.261429][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.266595][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.271232][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.277839][T16546] [ 1200.280226][T16546] Uninit was stored to memory at: [ 1200.285685][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.291010][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.296327][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.301139][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.305915][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.310732][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.317207][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.322495][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.327482][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.332222][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.338760][T16546] [ 1200.341118][T16546] Uninit was stored to memory at: [ 1200.346492][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.351807][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.357041][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.361965][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.366640][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.371479][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.378049][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.383334][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.388370][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.393173][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.399808][T16546] [ 1200.402300][T16546] Uninit was stored to memory at: [ 1200.407586][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.413074][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.418135][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.423127][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.427785][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.432749][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.439173][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.444510][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.449667][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.454464][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.461153][T16546] [ 1200.463696][T16546] Uninit was stored to memory at: [ 1200.468945][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.474358][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.479412][T16546] ___sys_recvmsg+0x19d/0x890 [ 1200.484405][T16546] do_recvmmsg+0x63a/0x10a0 [ 1200.489061][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.494040][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1200.500459][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1200.505806][T16546] do_fast_syscall_32+0x33/0x70 [ 1200.510823][T16546] do_SYSENTER_32+0x1b/0x20 [ 1200.515636][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1200.522288][T16546] [ 1200.524695][T16546] Local variable msg_sys created at: [ 1200.530085][T16546] do_recvmmsg+0x5f/0x10a0 [ 1200.534800][T16546] __sys_recvmmsg+0x113/0x450 [ 1200.836547][T16546] not chained 1190000 origins [ 1200.841306][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1200.851935][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1200.862129][T16546] Call Trace: [ 1200.865503][T16546] [ 1200.868504][T16546] dump_stack_lvl+0x1c8/0x256 [ 1200.873335][T16546] dump_stack+0x1a/0x1c [ 1200.877664][T16546] kmsan_internal_chain_origin+0x78/0x120 [ 1200.883598][T16546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1200.889850][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.895125][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1200.901545][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.906780][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1200.912787][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.918062][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1200.924006][T16546] ? __get_compat_msghdr+0x5b/0x750 [ 1200.929445][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.934760][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1200.940747][T16546] ? should_fail+0x3f/0x810 [ 1200.945365][T16546] ? __stack_depot_save+0x21/0x4b0 [ 1200.950593][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.955829][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1200.962279][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1200.967579][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1200.973580][T16546] __msan_chain_origin+0xbd/0x140 [ 1200.978718][T16546] __get_compat_msghdr+0x514/0x750 [ 1200.984009][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1200.989159][T16546] ? ___sys_recvmsg+0xa9/0x890 [ 1200.994016][T16546] ? do_recvmmsg+0x63a/0x10a0 [ 1200.998793][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.003602][T16546] ? __schedule+0x1609/0x21d0 [ 1201.008647][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1201.013955][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1201.019937][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1201.025170][T16546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1201.031167][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.035815][T16546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1201.042271][T16546] ? __sys_recvmmsg+0x52/0x450 [ 1201.047191][T16546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.053805][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.058648][T16546] ? kmsan_get_metadata+0x33/0x220 [ 1201.063957][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.070411][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.075603][T16546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1201.081590][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.086597][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.091238][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.097796][T16546] RIP: 0023:0xf7faf549 [ 1201.100607][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1201.101939][T16546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1201.102038][T16546] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 [ 1201.108489][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 1201.127943][T16546] ORIG_RAX: 0000000000000151 [ 1201.127981][T16546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1201.128048][T16546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1201.128108][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1201.128168][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.178162][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1201.186302][T16546] [ 1201.210701][T16546] Uninit was stored to memory at: [ 1201.220951][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.226440][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.231500][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.236453][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.241091][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.246047][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.252568][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.257758][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.262918][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.267624][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.274284][T16546] [ 1201.276690][T16546] Uninit was stored to memory at: [ 1201.282013][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.287339][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.292473][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.297301][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.302079][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.306912][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.313488][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.318764][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.323909][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.328571][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.335231][T16546] [ 1201.337641][T16546] Uninit was stored to memory at: [ 1201.344257][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.349565][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.354718][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.359555][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.364340][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.369197][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.375736][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.380930][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.386102][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.390747][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.397411][T16546] [ 1201.399797][T16546] Uninit was stored to memory at: [ 1201.405185][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.410498][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.415653][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.420513][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.425270][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.430089][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.436570][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.441746][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.446871][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.451533][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.458153][T16546] [ 1201.460546][T16546] Uninit was stored to memory at: [ 1201.466015][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.471324][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.476566][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.481394][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.486160][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.490992][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.497652][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.502956][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.507960][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.512733][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.519295][T16546] [ 1201.521685][T16546] Uninit was stored to memory at: [ 1201.527082][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.532494][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.537581][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.542569][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.547224][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.552247][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.558681][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.564016][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.569026][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.573777][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.580335][T16546] [ 1201.582904][T16546] Uninit was stored to memory at: [ 1201.588222][T16546] __get_compat_msghdr+0x514/0x750 [ 1201.593732][T16546] get_compat_msghdr+0x8c/0x1c0 [ 1201.598876][T16546] ___sys_recvmsg+0x19d/0x890 [ 1201.603876][T16546] do_recvmmsg+0x63a/0x10a0 [ 1201.608514][T16546] __sys_recvmmsg+0x113/0x450 [ 1201.613459][T16546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1201.619884][T16546] __do_fast_syscall_32+0x87/0xe0 [ 1201.625331][T16546] do_fast_syscall_32+0x33/0x70 [ 1201.630348][T16546] do_SYSENTER_32+0x1b/0x20 [ 1201.635202][T16546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1201.641851][T16546] [ 1201.644345][T16546] Local variable msg_sys created at: [ 1201.649724][T16546] do_recvmmsg+0x5f/0x10a0 [ 1201.654443][T16546] __sys_recvmmsg+0x113/0x450 09:45:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) 09:45:11 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) 09:45:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) 09:45:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)) 09:45:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x3f, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 09:45:12 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000980)={0x1c, 0x1c}, 0x1c) 09:45:12 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1b, &(0x7f00000001c0), 0x4) r2 = dup2(r1, r0) bind(r2, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10) 09:45:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="f201e2309e03c54593c56a264e9aaeb64b9773a86a11e6b0b95d436bc3954fc3e5a23028fb11ad304c476c7fbe2cc7626ca67a3bb8f278d59cadeafd2ef3b96a3bee4698e139e2518b704fe05e3250c957b9fd278f6beadca012c39e68ff985c6216a2ef585b618e74af898e52cca343db59a1dcf9d4a25f1ee5c3c777fac3a7c00c1fc2582eacd1c2f0497fa2f1e83374459e1861fc15f34e76db26589c1dc71a984ddbbff4a26834b3513655588d85f450c776c5ea552b782cfad907f99cabff4437ed93884ddef95f0c481d51e816eec8bcc6a12b35b8786c4e4221be", 0xde}, {&(0x7f0000001740)="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", 0xf13}], 0x3}, 0x20148) 09:45:12 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000000d40)={&(0x7f0000000000)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000bc0)=[@rights, @cred], 0x78}, 0x0) 09:45:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:13 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) 09:45:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x3, 0x2}, 0x10) 09:45:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:45:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) 09:45:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:14 executing program 3: syz_clone(0x0, 0x0, 0xfffffffffffffe34, 0x0, 0x0, 0x0) 09:45:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x5607) 09:45:14 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r0, 0x0, 0x0) 09:45:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$char_usb(r0, 0x0, 0x0) 09:45:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5411, 0x0) 09:45:15 executing program 3: r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x0, 0x0, 0x1, 0xffffffff}}, 0x30) [ 1206.364082][T16647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1206.370966][T16647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1206.379883][T16647] vhci_hcd vhci_hcd.0: Device attached [ 1206.568716][T16648] vhci_hcd: connection closed [ 1206.584249][T15182] vhci_hcd: stop threads [ 1206.596847][T15182] vhci_hcd: release socket [ 1206.601434][T15182] vhci_hcd: disconnect device [ 1206.642793][T10234] vhci_hcd: vhci_device speed not set [ 1207.419133][T16638] not chained 1200000 origins [ 1207.424125][T16638] CPU: 1 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1207.434897][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1207.445095][T16638] Call Trace: [ 1207.448481][T16638] [ 1207.451522][T16638] dump_stack_lvl+0x1c8/0x256 [ 1207.456426][T16638] dump_stack+0x1a/0x1c [ 1207.460870][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1207.466770][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1207.472983][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.478288][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1207.484717][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.490029][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.496012][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.501295][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.507231][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1207.512644][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.518033][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.524075][T16638] ? should_fail+0x3f/0x810 [ 1207.528743][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1207.534000][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.539278][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1207.545667][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.550952][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.556892][T16638] __msan_chain_origin+0xbd/0x140 [ 1207.562102][T16638] __get_compat_msghdr+0x514/0x750 [ 1207.567454][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1207.572513][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1207.577412][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1207.582204][T16638] ___sys_recvmsg+0x19d/0x890 [ 1207.587026][T16638] ? __schedule+0x1609/0x21d0 [ 1207.591799][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.597071][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.603048][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.608318][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1207.614271][T16638] do_recvmmsg+0x63a/0x10a0 [ 1207.618965][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1207.625424][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1207.630352][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.637032][T16638] __sys_recvmmsg+0x113/0x450 [ 1207.641797][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1207.647090][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.653552][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1207.658754][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1207.664756][T16638] do_fast_syscall_32+0x33/0x70 [ 1207.669772][T16638] do_SYSENTER_32+0x1b/0x20 [ 1207.674435][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1207.680999][T16638] RIP: 0023:0xf7faf549 [ 1207.685204][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1207.705046][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1207.713656][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1207.721755][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1207.729845][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1207.737968][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.746063][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.754216][T16638] [ 1207.763900][T16638] Uninit was stored to memory at: [ 1207.769183][T16638] __get_compat_msghdr+0x514/0x750 [ 1207.775151][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1207.780215][T16638] ___sys_recvmsg+0x19d/0x890 [ 1207.785145][T16638] do_recvmmsg+0x63a/0x10a0 [ 1207.789897][T16638] __sys_recvmmsg+0x113/0x450 [ 1207.794815][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.801246][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1207.806534][T16638] do_fast_syscall_32+0x33/0x70 [ 1207.811548][T16638] do_SYSENTER_32+0x1b/0x20 [ 1207.816298][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1207.822958][T16638] [ 1207.825404][T16638] Uninit was stored to memory at: [ 1207.830659][T16638] __get_compat_msghdr+0x514/0x750 [ 1207.836067][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1207.841125][T16638] ___sys_recvmsg+0x19d/0x890 [ 1207.846056][T16638] do_recvmmsg+0x63a/0x10a0 [ 1207.850722][T16638] __sys_recvmmsg+0x113/0x450 [ 1207.855649][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.862251][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1207.867537][T16638] do_fast_syscall_32+0x33/0x70 [ 1207.872692][T16638] do_SYSENTER_32+0x1b/0x20 [ 1207.877355][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1207.884090][T16638] [ 1207.886496][T16638] Uninit was stored to memory at: [ 1207.891828][T16638] __get_compat_msghdr+0x514/0x750 [ 1207.897333][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1207.902481][T16638] ___sys_recvmsg+0x19d/0x890 [ 1207.907296][T16638] do_recvmmsg+0x63a/0x10a0 [ 1207.912029][T16638] __sys_recvmmsg+0x113/0x450 [ 1207.917475][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.924058][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1207.929265][T16638] do_fast_syscall_32+0x33/0x70 [ 1207.934430][T16638] do_SYSENTER_32+0x1b/0x20 [ 1207.939090][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1207.945817][T16638] [ 1207.948228][T16638] Uninit was stored to memory at: [ 1207.953702][T16638] __get_compat_msghdr+0x514/0x750 [ 1207.959028][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1207.964250][T16638] ___sys_recvmsg+0x19d/0x890 [ 1207.969082][T16638] do_recvmmsg+0x63a/0x10a0 [ 1207.973853][T16638] __sys_recvmmsg+0x113/0x450 [ 1207.978677][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1207.985216][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1207.990413][T16638] do_fast_syscall_32+0x33/0x70 [ 1207.995606][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.000272][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.007026][T16638] [ 1208.009442][T16638] Uninit was stored to memory at: [ 1208.014849][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.020152][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.025353][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.030199][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.035018][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.039827][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.046331][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.051508][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.056663][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.061322][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.068052][T16638] [ 1208.070459][T16638] Uninit was stored to memory at: [ 1208.075940][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.081239][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.086445][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.091271][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.096049][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.100893][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.107472][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.112751][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.117784][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.122625][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.129197][T16638] [ 1208.131611][T16638] Uninit was stored to memory at: [ 1208.137034][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.142450][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.147513][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.152468][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.157131][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.162159][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.168587][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.173928][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.178938][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.183835][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.190417][T16638] [ 1208.192982][T16638] Local variable msg_sys created at: [ 1208.198371][T16638] do_recvmmsg+0x5f/0x10a0 [ 1208.203140][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.507721][T16638] not chained 1210000 origins [ 1208.512830][T16638] CPU: 0 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1208.523515][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1208.533781][T16638] Call Trace: [ 1208.537202][T16638] [ 1208.540237][T16638] dump_stack_lvl+0x1c8/0x256 [ 1208.545143][T16638] dump_stack+0x1a/0x1c [ 1208.549424][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1208.555250][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1208.561435][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.566656][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1208.573046][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.578688][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.584680][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.589889][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.595797][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1208.601113][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.606318][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.612243][T16638] ? should_fail+0x3f/0x810 [ 1208.616843][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1208.622064][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.627324][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1208.633678][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.638994][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.644996][T16638] __msan_chain_origin+0xbd/0x140 [ 1208.650182][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.655436][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.660403][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1208.665249][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1208.670019][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.674818][T16638] ? __schedule+0x1609/0x21d0 [ 1208.679732][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.684942][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.690852][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.696052][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1208.701978][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.706580][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1208.712927][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1208.717771][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.724334][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.729180][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1208.734457][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.740838][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.746028][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1208.752005][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.756946][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.761530][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.768002][T16638] RIP: 0023:0xf7faf549 [ 1208.772149][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1208.791961][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1208.800645][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1208.808691][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1208.816729][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.824798][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.832889][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.840953][T16638] [ 1208.847837][T16638] Uninit was stored to memory at: [ 1208.853594][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.858912][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.864099][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.868943][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.873724][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.878553][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.885096][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.890290][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.895455][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.900120][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.906829][T16638] [ 1208.909240][T16638] Uninit was stored to memory at: [ 1208.914632][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.920215][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.925485][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.930322][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.935108][T16638] __sys_recvmmsg+0x113/0x450 [ 1208.939924][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1208.946516][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1208.951712][T16638] do_fast_syscall_32+0x33/0x70 [ 1208.956935][T16638] do_SYSENTER_32+0x1b/0x20 [ 1208.961599][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1208.968292][T16638] [ 1208.970689][T16638] Uninit was stored to memory at: [ 1208.976109][T16638] __get_compat_msghdr+0x514/0x750 [ 1208.981425][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1208.986683][T16638] ___sys_recvmsg+0x19d/0x890 [ 1208.991670][T16638] do_recvmmsg+0x63a/0x10a0 [ 1208.996540][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.001354][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.007865][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.013186][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.018178][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.022974][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.029513][T16638] [ 1209.032076][T16638] Uninit was stored to memory at: [ 1209.037322][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.042717][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.047765][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.052807][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.057478][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.062434][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.068841][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.074130][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.079134][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.083932][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.090488][T16638] [ 1209.093052][T16638] Uninit was stored to memory at: [ 1209.098304][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.103747][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.108782][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.113753][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.118407][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.123402][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.129811][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.135148][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.140277][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.145151][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.152061][T16638] [ 1209.154477][T16638] Uninit was stored to memory at: [ 1209.159736][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.165270][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.170317][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.175289][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.179938][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.184934][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.191362][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.196654][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.201710][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.206833][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.213535][T16638] [ 1209.215944][T16638] Uninit was stored to memory at: [ 1209.221193][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.226754][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.231804][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.236797][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.241451][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.246449][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.253035][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.258231][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.263454][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.268117][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.274834][T16638] [ 1209.277227][T16638] Local variable msg_sys created at: [ 1209.282789][T16638] do_recvmmsg+0x5f/0x10a0 [ 1209.287513][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.593958][T16638] not chained 1220000 origins [ 1209.598779][T16638] CPU: 1 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1209.609442][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1209.619591][T16638] Call Trace: [ 1209.622977][T16638] [ 1209.626009][T16638] dump_stack_lvl+0x1c8/0x256 [ 1209.630877][T16638] dump_stack+0x1a/0x1c [ 1209.635165][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1209.641045][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1209.647261][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.652554][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1209.658968][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.664200][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.670208][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.675470][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.681475][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1209.686793][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.692022][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.698195][T16638] ? should_fail+0x3f/0x810 [ 1209.702878][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1209.708157][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.713390][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1209.719808][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.725099][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.731023][T16638] __msan_chain_origin+0xbd/0x140 [ 1209.736162][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.741509][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.746565][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1209.751472][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1209.756264][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.761104][T16638] ? _raw_spin_unlock+0x25/0x40 [ 1209.766234][T16638] ? __schedule+0x1035/0x21d0 [ 1209.771083][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.776352][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.782307][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.787604][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1209.793546][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.798200][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1209.804574][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1209.809465][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.816068][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.820942][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1209.826203][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.832646][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.837810][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1209.843735][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.848744][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.853399][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1209.859965][T16638] RIP: 0023:0xf7faf549 [ 1209.864150][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1209.884017][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1209.892571][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1209.900662][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1209.908710][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.916777][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.924859][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.932950][T16638] [ 1209.942769][T16638] Uninit was stored to memory at: [ 1209.948042][T16638] __get_compat_msghdr+0x514/0x750 [ 1209.954004][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1209.959066][T16638] ___sys_recvmsg+0x19d/0x890 [ 1209.964015][T16638] do_recvmmsg+0x63a/0x10a0 [ 1209.968708][T16638] __sys_recvmmsg+0x113/0x450 [ 1209.973641][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1209.980101][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1209.985381][T16638] do_fast_syscall_32+0x33/0x70 [ 1209.990386][T16638] do_SYSENTER_32+0x1b/0x20 [ 1209.995137][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.001695][T16638] [ 1210.004198][T16638] Uninit was stored to memory at: [ 1210.009451][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.014855][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.019909][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.024848][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.029529][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.034481][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.040880][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.046193][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.051198][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.055921][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.062570][T16638] [ 1210.064978][T16638] Uninit was stored to memory at: [ 1210.070225][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.075718][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.080770][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.085691][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.090326][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.095221][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.101664][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.106984][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.112099][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.116761][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.123468][T16638] [ 1210.125880][T16638] Uninit was stored to memory at: [ 1210.131060][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.136485][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.141531][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.146436][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.151071][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.156191][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.162663][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.167949][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.173076][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.177775][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.184451][T16638] [ 1210.186863][T16638] Uninit was stored to memory at: [ 1210.192263][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.197566][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.202725][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.207542][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.212301][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.217143][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.223675][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.228903][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.234030][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.238665][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.245300][T16638] [ 1210.247704][T16638] Uninit was stored to memory at: [ 1210.253091][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.258410][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.263550][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.268383][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.273147][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.277980][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.284557][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.289828][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.294993][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.299649][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.306314][T16638] [ 1210.308707][T16638] Uninit was stored to memory at: [ 1210.314196][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.319501][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.324718][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.329557][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.334335][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.339211][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.345806][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.350999][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.356193][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.360857][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.367519][T16638] [ 1210.369923][T16638] Local variable msg_sys created at: [ 1210.375460][T16638] do_recvmmsg+0x5f/0x10a0 [ 1210.380112][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.699145][T16638] not chained 1230000 origins [ 1210.704131][T16638] CPU: 0 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1210.714808][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1210.725004][T16638] Call Trace: [ 1210.728419][T16638] [ 1210.731443][T16638] dump_stack_lvl+0x1c8/0x256 [ 1210.736337][T16638] dump_stack+0x1a/0x1c [ 1210.740679][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1210.746581][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1210.752829][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.758123][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1210.764556][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.769933][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.775932][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.781304][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.787292][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1210.792698][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.798005][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.804007][T16638] ? should_fail+0x3f/0x810 [ 1210.808717][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1210.814025][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.819315][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1210.825742][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.831024][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.837016][T16638] __msan_chain_origin+0xbd/0x140 [ 1210.842216][T16638] __get_compat_msghdr+0x514/0x750 [ 1210.848085][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1210.853138][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1210.858051][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1210.862887][T16638] ___sys_recvmsg+0x19d/0x890 [ 1210.867738][T16638] ? __schedule+0x1609/0x21d0 [ 1210.872583][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.877870][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.883869][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.889151][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1210.895938][T16638] do_recvmmsg+0x63a/0x10a0 [ 1210.900721][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1210.907166][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1210.912172][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.918774][T16638] __sys_recvmmsg+0x113/0x450 [ 1210.923634][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1210.929033][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1210.936001][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1210.941276][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1210.947262][T16638] do_fast_syscall_32+0x33/0x70 [ 1210.952276][T16638] do_SYSENTER_32+0x1b/0x20 [ 1210.956940][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1210.963587][T16638] RIP: 0023:0xf7faf549 [ 1210.967779][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1210.987693][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1210.996279][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1211.004390][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1211.012497][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1211.020601][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.028734][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1211.036866][T16638] [ 1211.043896][T16638] Uninit was stored to memory at: [ 1211.049289][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.055314][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.060369][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.065331][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.070002][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.074957][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.081380][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.086711][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.091720][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.096569][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.103250][T16638] [ 1211.105767][T16638] Uninit was stored to memory at: [ 1211.111018][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.116461][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.121515][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.126467][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.131127][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.136077][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.142694][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.147879][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.153014][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.157685][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.164361][T16638] [ 1211.166768][T16638] Uninit was stored to memory at: [ 1211.172188][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.177496][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.182678][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.187513][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.192297][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.197122][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.203780][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.208976][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.214194][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.218943][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.225629][T16638] [ 1211.228037][T16638] Uninit was stored to memory at: [ 1211.233411][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.238730][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.243948][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.248801][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.253583][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.258527][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.265081][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.270294][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.275454][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.280109][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.286883][T16638] [ 1211.289388][T16638] Uninit was stored to memory at: [ 1211.294917][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.300500][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.305842][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.310680][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.317743][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.322752][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.329523][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.335159][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.340169][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.345012][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.351573][T16638] [ 1211.354204][T16638] Uninit was stored to memory at: [ 1211.359480][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.365006][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.370072][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.375177][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.379859][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.384895][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.391409][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.397070][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.402285][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.406980][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.413837][T16638] [ 1211.416245][T16638] Uninit was stored to memory at: [ 1211.421505][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.427040][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1211.432317][T16638] ___sys_recvmsg+0x19d/0x890 [ 1211.437155][T16638] do_recvmmsg+0x63a/0x10a0 [ 1211.441805][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.446806][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1211.453689][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1211.458988][T16638] do_fast_syscall_32+0x33/0x70 [ 1211.464904][T16638] do_SYSENTER_32+0x1b/0x20 [ 1211.469654][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1211.476429][T16638] [ 1211.479100][T16638] Local variable msg_sys created at: [ 1211.484673][T16638] do_recvmmsg+0x5f/0x10a0 [ 1211.489240][T16638] __sys_recvmmsg+0x113/0x450 [ 1211.846470][T16638] not chained 1240000 origins [ 1211.851293][T16638] CPU: 0 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1211.861986][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1211.872184][T16638] Call Trace: [ 1211.875567][T16638] [ 1211.878607][T16638] dump_stack_lvl+0x1c8/0x256 [ 1211.883501][T16638] dump_stack+0x1a/0x1c [ 1211.887847][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1211.893787][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1211.900048][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.905424][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1211.911865][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.917152][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1211.923235][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.928534][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1211.934702][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1211.940109][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.945409][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1211.951528][T16638] ? should_fail+0x3f/0x810 [ 1211.956210][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1211.961503][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.966794][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1211.973485][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1211.978856][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1211.984851][T16638] __msan_chain_origin+0xbd/0x140 [ 1211.990049][T16638] __get_compat_msghdr+0x514/0x750 [ 1211.995404][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.000471][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1212.005400][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1212.010239][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.015086][T16638] ? __schedule+0x1609/0x21d0 [ 1212.019930][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.025307][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.031312][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.036601][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.042600][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.047284][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1212.053817][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1212.058733][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.065341][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.070177][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.075478][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.081912][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.087099][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1212.093098][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.098378][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.103041][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.109595][T16638] RIP: 0023:0xf7faf549 [ 1212.113770][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1212.133492][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1212.142013][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1212.150098][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1212.158162][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1212.166199][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.174277][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1212.182328][T16638] [ 1212.189099][T16638] Uninit was stored to memory at: [ 1212.194798][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.200120][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.205305][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.210138][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.214921][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.219756][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.226307][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.231496][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.236662][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.241348][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.248044][T16638] [ 1212.250450][T16638] Uninit was stored to memory at: [ 1212.255848][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.261252][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.266453][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.271280][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.276065][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.280906][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.287516][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.292909][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.298002][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.302839][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.309413][T16638] [ 1212.311815][T16638] Uninit was stored to memory at: [ 1212.317244][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.322904][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.327950][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.332904][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.337565][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.342568][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.348993][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.354365][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.359373][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.364315][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.370872][T16638] [ 1212.373452][T16638] Uninit was stored to memory at: [ 1212.378709][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.384224][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.389285][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.394295][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.398951][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.403908][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.410348][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.415982][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.420972][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.425796][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.432489][T16638] [ 1212.434894][T16638] Uninit was stored to memory at: [ 1212.440141][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.445641][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.450700][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.455716][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.460355][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.465281][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.471689][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.477014][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.482160][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.486817][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.493504][T16638] [ 1212.495913][T16638] Uninit was stored to memory at: [ 1212.501064][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.506500][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.511557][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.516570][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.521235][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.526200][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.532745][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.537938][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.543141][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.547823][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.554587][T16638] [ 1212.556993][T16638] Uninit was stored to memory at: [ 1212.562359][T16638] __get_compat_msghdr+0x514/0x750 [ 1212.567688][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1212.572879][T16638] ___sys_recvmsg+0x19d/0x890 [ 1212.577699][T16638] do_recvmmsg+0x63a/0x10a0 [ 1212.582477][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.587310][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1212.593919][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1212.599107][T16638] do_fast_syscall_32+0x33/0x70 [ 1212.604320][T16638] do_SYSENTER_32+0x1b/0x20 [ 1212.608957][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1212.615598][T16638] [ 1212.617985][T16638] Local variable msg_sys created at: [ 1212.623519][T16638] do_recvmmsg+0x5f/0x10a0 [ 1212.628101][T16638] __sys_recvmmsg+0x113/0x450 [ 1212.859144][T16638] not chained 1250000 origins [ 1212.864471][T16638] CPU: 1 PID: 16638 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1212.875247][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1212.885443][T16638] Call Trace: [ 1212.888824][T16638] [ 1212.891932][T16638] dump_stack_lvl+0x1c8/0x256 [ 1212.896797][T16638] dump_stack+0x1a/0x1c [ 1212.901082][T16638] kmsan_internal_chain_origin+0x78/0x120 [ 1212.906922][T16638] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1212.913161][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.918391][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1212.924770][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.930041][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.935949][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.941206][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.947207][T16638] ? __get_compat_msghdr+0x5b/0x750 [ 1212.952603][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.957820][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.963754][T16638] ? should_fail+0x3f/0x810 [ 1212.968441][T16638] ? __stack_depot_save+0x21/0x4b0 [ 1212.973728][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.978993][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1212.985368][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1212.990674][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1212.996689][T16638] __msan_chain_origin+0xbd/0x140 [ 1213.001882][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.007197][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.012191][T16638] ? ___sys_recvmsg+0xa9/0x890 [ 1213.017113][T16638] ? do_recvmmsg+0x63a/0x10a0 [ 1213.021946][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.026777][T16638] ? __schedule+0x1609/0x21d0 [ 1213.031564][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1213.037244][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1213.043264][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1213.048627][T16638] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1213.054590][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.059462][T16638] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1213.065846][T16638] ? __sys_recvmmsg+0x52/0x450 [ 1213.070824][T16638] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.077425][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.082277][T16638] ? kmsan_get_metadata+0x33/0x220 [ 1213.087587][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.094033][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.099224][T16638] ? exit_to_user_mode_prepare+0x119/0x220 [ 1213.105319][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.110319][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.114997][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.121453][T16638] RIP: 0023:0xf7faf549 [ 1213.125613][T16638] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1213.145431][T16638] RSP: 002b:00000000f7f895cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1213.154040][T16638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1213.162157][T16638] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1213.170249][T16638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1213.178293][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.186369][T16638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1213.194585][T16638] [ 1213.204501][T16638] Uninit was stored to memory at: [ 1213.209777][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.215776][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.220845][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.225824][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.230491][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.235420][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.241842][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.247134][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.252262][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.256926][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.263587][T16638] [ 1213.265989][T16638] Uninit was stored to memory at: [ 1213.271244][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.276664][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.281699][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.286687][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.291319][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.296713][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.303313][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.308595][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.313746][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.318492][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.325130][T16638] [ 1213.327533][T16638] Uninit was stored to memory at: [ 1213.333055][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.338439][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.343575][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.348416][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.353248][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.358088][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.364602][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.369865][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.374981][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.379704][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.386300][T16638] [ 1213.388706][T16638] Uninit was stored to memory at: [ 1213.394105][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.399494][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.404684][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.409550][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.414309][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.419147][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.425732][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.430909][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.436046][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.440738][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.447437][T16638] [ 1213.449878][T16638] Uninit was stored to memory at: [ 1213.455281][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.460849][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.466014][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.471125][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.475899][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.480792][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.487400][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.492702][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.497690][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.502443][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.508986][T16638] [ 1213.511783][T16638] Uninit was stored to memory at: [ 1213.517180][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.522597][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.527654][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.532650][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.537316][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.542422][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.548854][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.554455][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.559568][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.564406][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.570977][T16638] [ 1213.573515][T16638] Uninit was stored to memory at: [ 1213.578756][T16638] __get_compat_msghdr+0x514/0x750 [ 1213.584192][T16638] get_compat_msghdr+0x8c/0x1c0 [ 1213.589242][T16638] ___sys_recvmsg+0x19d/0x890 [ 1213.594189][T16638] do_recvmmsg+0x63a/0x10a0 [ 1213.598845][T16638] __sys_recvmmsg+0x113/0x450 [ 1213.603805][T16638] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1213.610207][T16638] __do_fast_syscall_32+0x87/0xe0 [ 1213.615501][T16638] do_fast_syscall_32+0x33/0x70 [ 1213.620501][T16638] do_SYSENTER_32+0x1b/0x20 [ 1213.625272][T16638] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1213.631837][T16638] [ 1213.634417][T16638] Local variable msg_sys created at: [ 1213.639794][T16638] do_recvmmsg+0x5f/0x10a0 [ 1213.644547][T16638] __sys_recvmmsg+0x113/0x450 09:45:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 09:45:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}], 0x1c) 09:45:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'veth1_to_team\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000b40)={0x18, 0x0, {0x0, @multicast, 'macsec0\x00'}}) 09:45:24 executing program 3: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 09:45:24 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c860b6986b9b5057cd9"], 0x30}}, 0x0) 09:45:25 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x9}]}}, &(0x7f0000000440)=""/146, 0x26, 0x92, 0x1}, 0x20) 09:45:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000300)) 09:45:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xca, &(0x7f0000000200)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:45:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xca, &(0x7f0000000200)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:45:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:25 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000600)={0x54, 0x13, 0x301, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d2a89d7"}]}, 0x54}}, 0x0) 09:45:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/146, 0x26, 0x92, 0x1}, 0x20) 09:45:25 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40305828, 0x0) 09:45:26 executing program 3: bpf$MAP_CREATE(0x23, &(0x7f0000000280), 0x48) 09:45:26 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40086604, 0x0) 09:45:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="0a04"]) 09:45:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 09:45:27 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xca, &(0x7f0000000200)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:45:27 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:27 executing program 3: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 09:45:27 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c860b6986b9b5057cd9"], 0x30}}, 0x0) 09:45:27 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2, 0xe, 0x0, &(0x7f00000000c0)="72aee263eb2507c15cf8fdb64953", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 09:45:27 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) 09:45:27 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000d00000008000100000000000c00064d"], 0x28}}, 0x0) 09:45:27 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 09:45:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x104}, 0x48) 09:45:28 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:28 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) 09:45:28 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 09:45:28 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) 09:45:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:45:28 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 09:45:29 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c860b6986b9b5057cd9"], 0x30}}, 0x0) 09:45:29 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000019c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000100)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) 09:45:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:29 executing program 3: getpgrp(0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = msgget(0x1, 0xd0) msgctl$IPC_RMID(r0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x6200, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0x10, 0x0) 09:45:29 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "25b198602ffeeee8b2551f48ffb0ff55b214d17ae259a6c6eea20f3d2df56821"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)) 09:45:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:45:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:30 executing program 5: socket(0x11, 0x3, 0x200) 09:45:30 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 1220.304363][T15744] usb 3-1: new high-speed USB device number 15 using dummy_hcd 09:45:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1220.573261][T15744] usb 3-1: Using ep0 maxpacket: 32 [ 1220.693301][T15744] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 1220.702427][T15744] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1220.710756][T15744] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1220.725874][T15744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1220.736623][T15744] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1220.746636][T15744] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1220.760021][T15744] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1220.769424][T15744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:45:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:31 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1221.205084][T15744] usb 3-1: config 0 descriptor?? [ 1221.498512][T15744] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1221.603392][T15744] usb 3-1: USB disconnect, device number 15 [ 1221.671022][T15744] usblp0: removed 09:45:31 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000a13a6d9f2cfdaead291a32c5399aed15000000000c0000000800010075333200040002007dcbb051efd15333c9949400e3552f6ab0a8ff887c4fe0eea8b8094f097f1c24d17698b80cc9a47fb9a1e84d9fb655cf2fff1b8afb6790fcccf469a10b1695458c6befbf72dc6c8fec5cc2f1bc11783368f563dd2e4c860b6986b9b5057cd9"], 0x30}}, 0x0) [ 1222.113993][T15744] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1222.492906][T15744] usb 3-1: Using ep0 maxpacket: 32 [ 1222.643091][T15744] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 1222.651833][T15744] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1222.660414][T15744] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1222.675609][T15744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1222.686232][T15744] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1222.696271][T15744] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1222.710191][T15744] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1222.719672][T15744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:45:33 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 09:45:33 executing program 5: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 09:45:33 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x402c5828, 0x0) 09:45:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1223.005528][T15744] usb 3-1: config 0 descriptor?? [ 1223.070928][T15744] usb 3-1: can't set config #0, error -71 [ 1223.163382][T15744] usb 3-1: USB disconnect, device number 16 09:45:33 executing program 5: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 09:45:33 executing program 3: r0 = openat$autofs(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000800)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:45:33 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046207, 0x0) 09:45:33 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:45:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x34}]}) 09:45:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:34 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0040"], 0x0) 09:45:34 executing program 2: syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @remote, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @dev}}}}, 0x0) 09:45:34 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:45:34 executing program 0: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)) 09:45:34 executing program 5: openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1000100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="36f9381794c593a4bd90fcaaf1d96f7fba3a9de1886bf7a1926995d3fbe5eb0fba08dfb6036bc5ca22a68d859b7c0bc82cf45d83d708d0468b6273f7bbd083648f332010a079b95e8d") 09:45:35 executing program 2: syz_clone(0x8880000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1225.063630][ T3568] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1225.139509][T16794] binder: 16792:16794 ioctl c018620c 0 returned -14 [ 1225.302241][ T3568] usb 4-1: Using ep0 maxpacket: 32 [ 1225.455958][ T3568] usb 4-1: config 0 has too many interfaces: 64, using maximum allowed: 32 [ 1225.464940][ T3568] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.475468][ T3568] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 64 09:45:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) 09:45:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xc8001) io_setup(0x1, &(0x7f0000002a00)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 09:45:35 executing program 5: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_clone(0x8880000, &(0x7f00000000c0)="e3988b50aaa931c5c8191d2d5ceb7bdb14444c1805f7a406358037258d39181402175d42eea4c93b2b848198a1e621acc826b0eeef64536450abd9602487fd006f1edf0d17ff366806e188d54d5aa791f7ef93e01b3d7f57bc3fb29c8c0a8573c8492992ac2455e43e0e42ec189ad6dcca47da6d40a89220ee4c28080883b836a1ebf27c075d8c615877cbcaedcbe4c737698036f001385b7694d31fbf6e45d690aa7121742ca43fa89411d8a9c8fc25d3f3f6453af2c28842095e6dc8", 0xbd, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="6fa304785a338bdcebc6f2c0ff14956c673985202bf46b3a7e23ab2ab442938c182ea5cbcf70304a93057904b8d7d3328d04c4236438bf458fbc4ad13fb253c9ab4d873e60c357acb246262b6377cfe8dacaf7a29536e60b91d2") ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000280)={r2, 0x1, 0xfffffff8}) [ 1225.693128][ T3568] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.703411][ T3568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.711671][ T3568] usb 4-1: Product: syz [ 1225.716226][ T3568] usb 4-1: Manufacturer: syz [ 1225.721069][ T3568] usb 4-1: SerialNumber: syz 09:45:35 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) [ 1225.798337][ T3568] usb 4-1: config 0 descriptor?? [ 1226.061429][ T8542] usb 4-1: USB disconnect, device number 13 09:45:36 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000500)='e', 0x1}], 0x840, &(0x7f0000000600)={[{@size={'size', 0x3d, [0x0]}}]}) 09:45:36 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff}) 09:45:36 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x0) 09:45:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:45:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:37 executing program 0: openat$sequencer(0xffffff9c, 0x0, 0x4000c2, 0x0) 09:45:37 executing program 2: fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) [ 1227.205524][T16818] binder: 16816:16818 ioctl 400c620e 20000000 returned -22 09:45:37 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:37 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xc8001) write$ppp(r0, &(0x7f0000000300)="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", 0xfffffffffffffe9d) 09:45:37 executing program 5: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) 09:45:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) 09:45:37 executing program 2: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 09:45:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:38 executing program 0: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) 09:45:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0xf) 09:45:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24}, 0x24}}, 0x0) 09:45:38 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:38 executing program 3: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)='7'}) 09:45:39 executing program 0: r0 = openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x84, 0x0, &(0x7f00000001c0)=[@exit_looper, @enter_looper, @release={0x40046306, 0x3}, @enter_looper, @release={0x40046306, 0x1}, @release={0x40046306, 0x3}, @acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/138, 0x8a, 0x0, 0xa}, @fd, @fda={0x66646185, 0x1, 0x0, 0x1c}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0xff, 0x0, &(0x7f00000002c0)="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"}) 09:45:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)) 09:45:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:39 executing program 0: add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="f6", 0x1, 0xffffffffffffffff) [ 1229.697944][T16858] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:45:39 executing program 3: io_submit(0x0, 0x5f, 0x0) 09:45:40 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd74, 0x0, 0x0) 09:45:40 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)) 09:45:40 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) 09:45:40 executing program 3: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 09:45:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:40 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$qnx6(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1c", 0x1}, {0x0}], 0x0, &(0x7f00000001c0)={[{'}'}]}) pkey_alloc(0x0, 0x2) syz_mount_image$nilfs2(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000480)="87", 0x1}], 0x1009000, &(0x7f0000000500)={[{@discard}, {@order_relaxed}, {@order_strict}], [{@subj_role={'subj_role', 0x3d, '%@,\xbd-\xa6*$'}}, {@obj_user={'obj_user', 0x3d, '\')}{&-@\']%,'}}]}) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x1, &(0x7f0000000880)=[{0x0}], 0x0, &(0x7f00000008c0)={[{@jqfmt_vfsv0}, {@resgid={'resgid', 0x3d, 0xee00}}]}) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x8, &(0x7f0000001f40)=[{0x0, 0x0, 0x200}, {0x0}, {&(0x7f0000000d40)="9574fe259cc9b0b3d2bad6564f23680ec440a4cb0e66bc097696cd4eebdc566e863b750059230126c425bdaea0612262c6da0bf6cbc36faed778fb538642ef89bafbf64433d3ff46810d0e74860b72dc38b66753babaaed7687258b71bf18df0b682dee335c64ffa13235f5c9b6d2338205a9f7bf9a912718fbc7c0f5cd4b481fc37a759ba3bddfcfd94a8090752f7769508ca427349fe450861520939474ef212018934d8", 0xa5, 0x4}, {&(0x7f0000000e00), 0x0, 0x7}, {0x0}, {0x0, 0x0, 0xdf}, {0x0}, {0x0, 0x0, 0x3}], 0x800000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000020c0)={@id={0x2, 0x0, @c}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 09:45:41 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)) [ 1231.469330][T16885] qnx6: invalid mount options. 09:45:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}, 0x0, 0x8000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 09:45:41 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) [ 1231.734572][T16885] loop5: detected capacity change from 0 to 2 09:45:41 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:41 executing program 2: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write(r0, &(0x7f0000000040)='j', 0x1) [ 1231.897909][T16664] Dev loop5: unable to read RDB block 2 [ 1231.904439][T16664] loop5: unable to read partition table 09:45:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8}]}}]}, 0x38}}, 0x0) [ 1231.948305][T16664] loop5: partition table beyond EOD, truncated 09:45:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) [ 1232.467222][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 09:45:42 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) [ 1232.754032][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.763580][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.772953][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.779873][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.790183][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.800499][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.899431][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:43 executing program 2: syz_usb_connect(0x0, 0x69, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0xa, 0x13, 0x20, 0x19d2, 0x1061, 0xe086, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@extension_unit={0x7}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "9ba86c1013"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "85e668bb491c"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x0, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) [ 1233.102120][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.116503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:43 executing program 5: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, &(0x7f0000000040), 0x69) 09:45:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) [ 1233.333880][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.363373][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.396958][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:43 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) [ 1233.450908][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.492247][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.580635][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.620563][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.678483][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.772977][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.807281][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.825547][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:43 executing program 5: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, &(0x7f0000000040), 0x69) [ 1233.874850][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.897188][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.981332][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.007345][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.022876][T15744] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1234.054559][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.127652][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.282852][T15744] usb 3-1: Using ep0 maxpacket: 32 [ 1234.299164][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.326992][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.383632][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.416993][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.424423][T15744] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1234.434101][T15744] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1234.449981][T15744] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.476583][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.493397][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.538940][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.579788][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.589615][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.600911][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.608670][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.633948][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.641170][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.673263][T15744] usb 3-1: New USB device found, idVendor=19d2, idProduct=1061, bcdDevice=e0.86 [ 1234.682874][T15744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.691121][T15744] usb 3-1: Product: syz [ 1234.695652][T15744] usb 3-1: Manufacturer: syz [ 1234.700474][T15744] usb 3-1: SerialNumber: syz [ 1234.714057][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.720748][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.741168][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.759950][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.770541][T15744] usb 3-1: config 0 descriptor?? [ 1234.790769][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.797973][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.803660][T16913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1234.813575][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.830410][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.838667][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.848695][T15744] option 3-1:0.0: GSM modem (1-port) converter detected [ 1234.884477][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.908623][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.928987][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.940599][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.949551][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.971723][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.994370][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.001542][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.009835][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.020926][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.030659][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.038094][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.077638][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.083050][T15744] usb 3-1: USB disconnect, device number 17 [ 1235.095826][T15744] option 3-1:0.0: device disconnected [ 1235.110530][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.120894][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.147513][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.170777][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.178423][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.189265][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.201169][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.213314][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.220470][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.229320][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.236482][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.248331][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.256193][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.277784][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.285257][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.294829][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.301506][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.315030][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.321767][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.329407][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.339151][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.345907][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.357450][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.373693][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.381434][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.393033][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.399756][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.409503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.419953][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.436766][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.444079][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.451063][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.475111][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.487138][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.497570][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.510173][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.518586][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.530781][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.545924][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.554084][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.560814][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.579197][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.596903][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.608157][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.616794][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.626589][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.638958][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.646537][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.658898][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.668767][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.686744][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.694134][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.701154][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.709988][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.740228][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.753675][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.760285][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.789170][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.797555][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.813593][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.820212][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.835759][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.843359][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.849966][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.865546][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.887422][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.897930][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.909557][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.918601][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.925377][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.936562][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.943602][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.950257][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.966497][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.973720][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.995913][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.003388][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.009988][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.019579][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.033312][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.039912][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.047913][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.059754][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.066498][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.077590][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.091530][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.102770][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.109436][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.122610][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.129280][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.141976][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.149202][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.160925][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.168238][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.174996][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.181687][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.198147][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.209071][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.219756][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.230015][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.240978][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.248816][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.256442][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.267737][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.277403][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.298192][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.307558][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.320870][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.330161][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.338464][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.349495][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.357143][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.364446][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.371099][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.379767][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.397306][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.408167][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.417904][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.431514][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.440945][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.450725][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.460095][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.467955][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.475041][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.482061][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.488902][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.510987][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.517767][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.528931][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.537256][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.548377][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.557994][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.569068][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.577083][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.589987][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.606873][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.616333][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.624465][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.631076][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.640210][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.650827][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.662216][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.668926][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.679850][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.687778][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.703760][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.710387][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.719881][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.729186][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.741233][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.748370][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.765226][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.775632][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.786584][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.796058][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.810590][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.818170][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.825438][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.835674][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.846597][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.854506][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.861153][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.875972][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.885613][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.897012][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.911611][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.919395][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.926242][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.934405][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.941020][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.949353][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.956565][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.969554][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.979146][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.989847][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.004910][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.016512][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.023840][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.030505][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.038746][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.045508][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.052382][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.066539][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.074471][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.081094][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.089731][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.097379][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.118051][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.128834][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.141435][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.148366][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.156797][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.166689][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.175343][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.182325][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.189348][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.200569][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.219376][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.230403][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.238570][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.245370][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.252249][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.259278][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.270722][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.277475][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.285188][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.301275][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.321167][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.339480][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.346423][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.354675][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.361275][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.369472][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.378338][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.385600][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.396088][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.405125][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.420626][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.431747][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.438696][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.446358][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.462290][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.469009][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.480260][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.487230][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.497177][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.504547][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.511135][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.526017][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.539244][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.548134][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.560037][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.568161][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.579414][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.587033][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.594677][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.601292][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.630499][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.639852][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.650669][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.657576][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.669892][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.678875][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.686795][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.701421][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.709433][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.728102][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.737338][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.745452][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.759027][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.765849][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.781782][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.788561][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.799683][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.811459][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.819397][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.836779][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.843876][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.850491][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.860503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.871059][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.879056][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.887807][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.897431][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.905492][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.918792][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.931342][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.940740][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.948978][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.956124][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.965816][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.979150][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.986481][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.996080][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.007546][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.017161][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.039512][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.046831][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.054265][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.060954][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.069310][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.077756][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.092874][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.099576][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.117369][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.126704][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.144103][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.150788][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.198674][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.223175][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.229811][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.275078][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.281732][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.297953][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.309516][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.319534][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.328286][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.342897][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.349579][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.368432][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.376981][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.388754][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.395544][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.410656][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.420158][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.427777][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.448277][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.455184][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.462115][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.470689][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.478047][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.488506][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.501552][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.508360][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.516018][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.527146][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.546860][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.556333][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.564459][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.571092][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.579952][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.586802][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.594673][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.601289][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.618559][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.625306][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.632063][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.649894][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.657502][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.668638][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.679050][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.686833][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.694526][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.701121][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.711695][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.718809][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.730211][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.736937][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.762381][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.769000][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.780033][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.787578][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.799702][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.806653][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.825019][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.831640][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.839869][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.858095][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.868747][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.876711][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.888135][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.895900][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.904225][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.910838][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.924545][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.931233][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.944386][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.963472][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.970140][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.980292][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.994177][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.000796][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.011625][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.020906][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.031082][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.040660][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.048361][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.067022][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.077122][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.085271][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.092305][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.107293][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.115169][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.121785][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.129027][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.140020][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.149891][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.165460][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.179134][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.187608][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.198989][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.207099][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.216691][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.227588][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.234354][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.240955][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.250659][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.271736][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.278722][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.287328][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.298677][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.309323][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.322522][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.329156][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.336833][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.345307][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.352137][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.369213][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.380467][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.388338][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.397768][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.409062][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.418502][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.426533][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.440428][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.448122][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.455207][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.470207][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.487381][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.499088][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.507347][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.518820][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.526300][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.539445][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.546308][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.556804][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.575471][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.584609][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.591251][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.599434][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.621310][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.629924][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.638174][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.645705][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.655652][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.675591][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.687173][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.698790][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.708425][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.717976][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.730198][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.739608][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.750788][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.757852][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.777501][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.789010][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.796759][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.807728][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.815681][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.831630][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.839609][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.849842][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.856932][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.879293][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.890345][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.897496][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.905542][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.915756][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.925051][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.931682][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.943489][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.950135][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.961441][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.968257][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.986811][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.998772][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.006409][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.013794][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.020464][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.030244][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.037040][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.051210][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.060582][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.071134][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.086181][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.101114][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.118300][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.125141][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.131809][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.138785][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.145737][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.152494][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.159083][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.173311][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.196220][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.203612][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.210407][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.228226][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.238614][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.250264][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.257249][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.265712][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.277089][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.291989][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.299022][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.308055][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.319503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.327962][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.335419][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.352580][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.359248][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.367702][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.375945][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.396479][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.405203][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.411810][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.423430][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.430074][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.438219][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.450299][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.463712][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.470336][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.482617][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.499143][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.509220][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.516021][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.529598][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.536471][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.544497][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.551153][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.563946][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.570648][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.589114][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.598885][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.608970][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.623096][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.629725][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.644998][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.651621][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.665075][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.671708][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.685835][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.700814][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.708563][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.719291][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.727415][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.737851][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.753121][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.759741][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.769618][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.779002][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.802542][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.809178][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.819798][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.826933][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.838211][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.845255][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.852052][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.862420][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.869186][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.876584][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.887547][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.904654][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.911345][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.919524][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.926832][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.935155][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.941837][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.955295][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.962164][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.970264][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.979649][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.989014][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.008618][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.019513][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.027926][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.035032][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.041709][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.050459][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.057659][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.067971][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.079560][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.087859][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.095447][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.107780][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.116396][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.131797][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.139146][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.147916][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.156283][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.166892][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.173738][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.180474][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.190751][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.209135][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.216218][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.227394][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.235034][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.241702][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.254504][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.261121][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.270524][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.277278][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.288831][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.310335][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.317094][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.332549][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.339222][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.355869][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.367023][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.381996][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.388754][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.396847][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.420261][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.427034][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.437987][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.444744][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.451738][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.462199][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.470921][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.479047][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.491942][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.498744][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.519203][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.528415][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.536063][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.547417][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.555171][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.561817][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.575376][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.586956][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.597915][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.608785][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.621044][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.630434][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.638503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.645669][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.655103][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.661727][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.669344][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.678724][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.690011][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.720539][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.727678][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.738897][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.747134][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.754835][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.761449][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.769059][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.776469][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.787844][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.799222][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.807852][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.828331][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.835435][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.850500][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.859917][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.868281][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.876067][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.884449][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.891148][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.899876][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.909267][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.925050][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.931697][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.944944][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.951631][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.967162][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.977379][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.985598][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.996450][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.007137][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.079707][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.086836][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.100999][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.111045][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.120392][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.136913][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.143658][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.150249][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.158345][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.165588][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.184103][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.190860][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.202685][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.209468][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.220193][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.236137][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.247339][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.255229][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.262191][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.269591][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.276954][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.288844][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.297294][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.309862][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.318633][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.335601][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.346811][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.355485][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.363799][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.370429][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.378503][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.385664][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.397905][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.409286][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.421299][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.432185][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.443828][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.451005][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.463120][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.469742][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.478084][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.486550][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.494889][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.501494][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.509613][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.521335][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.539936][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.547010][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.559565][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.566440][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.575233][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.582200][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:52 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:52 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x3404) syz_mount_image$qnx6(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xff, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x3}], 0x0, &(0x7f00000001c0)={[{'}'}], [{@measure}, {@subj_user={'subj_user', 0x3d, './*(\xca[&}&'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000380)={@id={0x2, 0x0, @c}}) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0xffffffffffffffff) syz_mount_image$nilfs2(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000480)="8739", 0x2, 0xffffffff}], 0x1009000, &(0x7f0000000500)={[{@order_relaxed}, {@order_strict}, {@snapshot}], [{@obj_user={'obj_user', 0x3d, '\')}{&-@\']%,'}}]}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000700)={0x0, 0x3ff, 0x10001, 0x5, 0x74, 0x0, 0x0, 0xd6, 0x0, 0xc5, 0x7, "c660b3f7b17cac1309bbdf9052cf2daa06c50bc74dbdfb1b4857eb5e03704bfd"}) syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@jqfmt_vfsv0}], [{@dont_measure}]}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000940)={0x1, 0x5}, 0x2) syz_mount_image$xfs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x3, &(0x7f0000001f40)=[{&(0x7f0000000bc0)="cd9a7092163e96969d05039f6e4b7a7a84f7ff7d52fe3b3d3e677b41d74c648889abf3b87e3eb32b8d2a3d46ead8ed1da4fbb809cb33f089e9a871e2c3dbe20b087ce656e4e3cbd1f4f181cab974ee1d44f73fe1", 0x54, 0x200}, {&(0x7f0000000c80)="c9e3b3c8eab65bebe2a4b01aad34ed0ca3181316af4b6124e1d24db029f90318dd340fc75c2d86b1e3be69b7047d1b51164d3d5ce1ebac8a78edc6a3e63f15c2c73c", 0x42, 0x3f}, {0x0}], 0x800000, &(0x7f0000002040)={[{@nogrpid}], [{@subj_type={'subj_type', 0x3d, '\')}{&-@\']%,'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'user_id'}}, {@permit_directio}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) 09:45:52 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) io_setup(0x1, &(0x7f0000002a00)=0x0) io_destroy(r1) io_destroy(r0) 09:45:52 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:52 executing program 2: syz_usb_connect(0x0, 0x69, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xea, 0xa, 0x13, 0x20, 0x19d2, 0x1061, 0xe086, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [@uac_control={{}, [@extension_unit={0x7}, @selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "9ba86c1013"}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "85e668bb491c"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x0, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) [ 1242.593767][T16903] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.600432][T16903] ieee802154 phy0 wpan0: encryption failed: -22 09:45:53 executing program 0: write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) 09:45:53 executing program 5: r0 = epoll_create(0x8) r1 = socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xffffffff) [ 1243.143960][ T3147] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1243.193050][T16936] qnx6: invalid mount options. 09:45:53 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) [ 1243.412483][ T3147] usb 3-1: Using ep0 maxpacket: 32 09:45:53 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="72392eaa85987a6b8ee0e871d02b2c1ab4636bab", 0x14}], 0x1, &(0x7f0000000600)=[{0x10, 0x1, 0x1}], 0x10}}], 0x1, 0x0) [ 1243.533094][ T3147] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1243.542567][ T3147] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1243.552777][ T3147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 09:45:53 executing program 0: write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) 09:45:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) [ 1243.932383][ T3147] usb 3-1: New USB device found, idVendor=19d2, idProduct=1061, bcdDevice=e0.86 [ 1243.941747][ T3147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.950443][ T3147] usb 3-1: Product: syz [ 1243.954985][ T3147] usb 3-1: Manufacturer: syz [ 1243.959895][ T3147] usb 3-1: SerialNumber: syz 09:45:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, r1, 0x5b2e76398f356277, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x33fe0}}, 0x0) 09:45:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x4, 0x10, r0, 0x0) [ 1244.115291][ T3147] usb 3-1: config 0 descriptor?? [ 1244.135640][T16928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 09:45:54 executing program 0: write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) [ 1244.209472][ T3147] option 3-1:0.0: GSM modem (1-port) converter detected [ 1244.458865][T16949] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1244.468785][T16949] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1244.473437][ T3568] usb 3-1: USB disconnect, device number 18 [ 1244.493272][ T3568] option 3-1:0.0: device disconnected 09:45:54 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:54 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:55 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x60081) write$ppp(r0, &(0x7f0000000100)="13e936c62cd47505b192568dfd053e7de6311de1a191f16005d2e308a59373c255b3746b8578ca7dc19d4342dbb8f5f48609cb2460f45e2aa3293a9181032b094152cf884bb4d8a5a1574e1f714291f65ea4dd144c35716575a8fc49f986b6bf538c75b8780e70511783f47a4087744bc38d99953f149882c0ef7dd5f944638bc8d18bb5b35e3ba82af99f689b55ed9e954c76a020fd7bf879ba068f45a5ced225787902bb40", 0xa6) 09:45:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002a00)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:45:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f0000000040)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000ba010000000001ba252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a080200000100000101", 0x21, 0x8b000}], 0x0, &(0x7f0000004200)=ANY=[]) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 09:45:55 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) io_submit(r0, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:45:55 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:55 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x5411, 0x0) 09:45:55 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) [ 1245.841203][T16971] loop5: detected capacity change from 0 to 2224 09:45:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x0, 0xfffffffc, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="bc", 0x1}], 0x1}}], 0x1, 0x0) 09:45:56 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b1", 0x1}], 0x1, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffdf8, 0x0, 0x0, 0x0, 0x700}}], 0x700, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 09:45:56 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000280)="ace836c67ab8fc4e184163224c6e7b46d074d2aea89750dd9c6944ac5190b8515c29509cd917343b1bd51bedfddf6ea3c77e67b4d7f89d6f7c0622e9e4c892f6d69fa659a090aefe0deb30161d9497bf8b27ebd25a9f72cc77c64b3bf20e10a624e50f386b480892bade3b74eea00f549f9aa6dc44ff496831be33161db8a37fdbc5e0f044c41843d158729752b1e425a5b0b3e330b1a6d2e097b0827d570dab4cab8ffd2ea26936de231f2b53410de4aebdf40dcba662ededb1421bea70cb9dfd2646b7629e10e5f44599c41a82aad641bf95448d56ca785bfc8fddc5e9a9", 0xdf) socket(0x9, 0x2, 0xffff) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/uts\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40c01}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:45:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:56 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:56 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:56 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) 09:45:57 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:57 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89e4, 0x0) 09:45:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:57 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) io_setup(0x4, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000040)="a9ed0c8b3151ec", 0x7}]) 09:45:57 executing program 0: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$damon_attrs(r0, 0x0, 0x5) 09:45:57 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:58 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89e7, 0x0) 09:45:58 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89e2, 0x0) 09:45:58 executing program 0: openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) 09:45:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x3, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="bc", 0x1}], 0x1}}], 0x1, 0x0) 09:45:58 executing program 5: socket(0x23, 0x0, 0x4000000) 09:45:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:45:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:59 executing program 0: openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) 09:45:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r0, r2, 0x0) 09:45:59 executing program 2: syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x884101) 09:45:59 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xc8001) write$ppp(r0, &(0x7f0000000080)="dd9e53f8f6e98f695f013ef7461a9d4c19453ff9d02b6334365e398ddc4788eed73b180e22c2fb1ac9172393f469b89b9d776293d27894a5a439680847064815850002000000000000672c13defaffffff0062269c078dff8dd9cba25dbcd8e8ab8c65b076eb2690e03f7bd68ee428579afa50f6a548312de213ac9f25476cfa264688df8eec10f8a22e54594c9c4b4647de7ce00f1fce25ad32f06fcc412613961eec956b94ae95feb3f08d96f11b1230f8d6fc030037396e16703a7d154d6da087e29c6a55ae00ebbc1aa3144bee2822ed9793c36fddaea8d100"/232, 0xfffffee5) 09:45:59 executing program 0: openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$damon_attrs(0xffffffffffffffff, 0x0, 0x5) 09:45:59 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:45:59 executing program 3: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 09:45:59 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x894c, 0x0) 09:46:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:00 executing program 3: socketpair(0x29, 0x2, 0x2, &(0x7f0000000000)) 09:46:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/4096, 0x1000) 09:46:00 executing program 2: syz_mount_image$fuse(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0xa003, &(0x7f0000006740)) 09:46:00 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_trie\x00') read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 09:46:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) 09:46:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "888d046e"}, 0x0, 0x1, {0x0}}) 09:46:01 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89eb, 0x0) 09:46:01 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="88", 0x1}], 0x1}}], 0x1, 0x0) 09:46:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 09:46:01 executing program 2: syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca7436000905"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000540)="90", 0x1) 09:46:02 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:02 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 09:46:02 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x42540, 0x0) [ 1252.712992][ T3568] usb 3-1: new low-speed USB device number 19 using dummy_hcd 09:46:02 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89e1, 0x0) 09:46:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) [ 1253.083455][ T3568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.094640][ T3568] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1253.105659][ T3568] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 09:46:03 executing program 0: open(&(0x7f0000000080)='./bus\x00', 0x40842, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 09:46:03 executing program 5: setresuid(0xee00, 0xee00, 0x0) r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) 09:46:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1253.415765][ T3568] usb 3-1: string descriptor 0 read error: -22 [ 1253.422661][ T3568] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1253.432124][ T3568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:46:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) [ 1253.485576][ T3568] usb 3-1: config 0 descriptor?? [ 1253.606258][ T3568] adutux 3-1:0.0: interrupt endpoints not found [ 1253.741735][ T3568] usb 3-1: USB disconnect, device number 19 09:46:04 executing program 5: r0 = socket(0x25, 0x1, 0x0) sendmmsg$alg(r0, &(0x7f0000003400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 09:46:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 09:46:04 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@size={'size', 0x3d, [0xa]}}]}) 09:46:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:46:04 executing program 5: socketpair(0x1, 0x80001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb0100180000000000000086000000860001"], &(0x7f0000001240)=""/168, 0xa3, 0xa8, 0x4}, 0x20) 09:46:05 executing program 3: getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) [ 1254.956865][T17107] tmpfs: Bad value for 'size' 09:46:05 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0xc, 0xfffffffffffffff8) 09:46:05 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)) 09:46:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1255.425415][T17115] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1255.440721][T17115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 09:46:05 executing program 0: socketpair(0x25, 0x1, 0x0, &(0x7f0000000180)) [ 1255.554421][T17115] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1255.562691][T17115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 09:46:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:05 executing program 2: memfd_create(&(0x7f0000000180)=']\x00', 0x2) 09:46:05 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x101300, 0x0) 09:46:05 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xf6ffffff, 0x0) 09:46:06 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:06 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@discard}, {@discard}, {@order_relaxed}, {@order_strict}, {@discard}, {@snapshot}, {@nodiscard}, {@snapshot}, {@order_relaxed}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_role={'subj_role', 0x3d, '%@,\xbd-\xa6*$'}}, {@obj_user={'obj_user', 0x3d, '\')}{&-@\']%,'}}, {@fowner_gt={'fowner>', 0xee01}}]}) 09:46:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x1000000) 09:46:06 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xff00, 0x0) 09:46:06 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x5421, 0x0) 09:46:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:46:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40) 09:46:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:07 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x3, 0x0, 0x4}) 09:46:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[], &(0x7f0000001240)=""/168, 0xa3, 0xa8, 0x4}, 0x20) 09:46:07 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:07 executing program 0: socket(0x2, 0x0, 0xfffffff8) 09:46:08 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={0x0, 0x0, 0x18}, 0x10) 09:46:08 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x50, 0x0, 0x0) 09:46:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xa}]}}, &(0x7f0000000040)=""/189, 0x26, 0xbd, 0x1}, 0x20) 09:46:08 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:08 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 09:46:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000080), &(0x7f0000000100)=0xc) 09:46:08 executing program 3: setresuid(0xee00, 0xee00, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 09:46:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0x77f, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x1000000) 09:46:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x111, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 09:46:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 09:46:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000840)={&(0x7f0000000240), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:46:09 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000019c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000100)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xfffffdd6) 09:46:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x1}}) 09:46:09 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc0189436, 0x0) [ 1260.082890][T15744] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1260.372099][T15744] usb 4-1: Using ep0 maxpacket: 32 [ 1260.513069][T15744] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 1260.522210][T15744] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1260.530563][T15744] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1260.540098][T15744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1260.550170][T15744] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1260.566362][T15744] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1260.580544][T15744] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1260.589975][T15744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.092496][T15744] usb 4-1: config 0 descriptor?? 09:46:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1261.384368][T15744] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 09:46:11 executing program 5: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)={0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x7fffffff]}, 0x8}) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 09:46:11 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom1\x00'}) [ 1261.574866][T15744] usb 4-1: USB disconnect, device number 14 [ 1261.655976][T15744] usblp0: removed 09:46:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xfffffffffffffd89, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7005fddbdf2528000000000001007770616e30000000682b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20008881) 09:46:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) [ 1262.143540][T15744] usb 4-1: new high-speed USB device number 15 using dummy_hcd 09:46:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x49b3796b50c666ef}, 0x14}}, 0x0) 09:46:12 executing program 5: syz_clone(0xd32a1080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1262.412454][T15744] usb 4-1: Using ep0 maxpacket: 32 [ 1262.523638][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1262.530318][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 1262.544081][T15744] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 1262.553101][T15744] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1262.561720][T15744] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1262.571037][T15744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1262.581461][T15744] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1262.591583][T15744] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1262.611057][T15744] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1262.620972][T15744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:46:12 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x51dc02, 0x0) 09:46:12 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) 09:46:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:13 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1263.180211][T15744] usb 4-1: config 0 descriptor?? 09:46:13 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:13 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x4020940d, 0x0) [ 1263.249820][T15744] usb 4-1: can't set config #0, error -71 [ 1263.269468][T15744] usb 4-1: USB disconnect, device number 15 09:46:13 executing program 3: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) 09:46:14 executing program 5: syz_clone(0xd32a1080, 0x0, 0x0, 0x0, 0x0, 0x0) 09:46:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:14 executing program 2: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x7fffffff]}, 0x8}) 09:46:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:14 executing program 3: syz_clone(0x3000a080, 0x0, 0x0, 0x0, 0x0, 0x0) 09:46:14 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000040)={&(0x7f00000000c0)="8e4d88651db1fd4aec3b89e33bdba40f63f3880c2ebb881dc9174e0552229f293bf2b10d9d14c77b588c6df46e3c4529d6edb57252586567a04a58e42e02bf76de395b49d0b1be862647ccfcab1c02a1fb575ea90f58a30c15392670441c30b9fed68b1ff67f8235f13599b7cbb2592e2bf5ee6bb80c04973586fda4d99453b6", 0x80}}, 0x0) 09:46:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) 09:46:14 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) 09:46:15 executing program 3: syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)='x') 09:46:15 executing program 0: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x3f}, 0x0, 0x0) 09:46:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}}) 09:46:15 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 09:46:16 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x120, &(0x7f0000000180)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket(0xa, 0x4, 0x0) 09:46:16 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0xc2000000) 09:46:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:16 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0) 09:46:16 executing program 3: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0xee00) 09:46:16 executing program 0: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 09:46:16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 09:46:16 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f00000001c0), &(0x7f0000000280)=0x90) 09:46:16 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x5452, 0x0) 09:46:16 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xf2142, 0x0) 09:46:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="660f3828fec4e2b145554ff2afc4e3f914a7b900000084b81bc300000f23d00f21f835000000080f23f8c4e3f57e8e5e01d36044640f8ef2ffffffc4c179e6f40f001500a0dd8cf30fc7347c", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:46:17 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="bb", &(0x7f0000000700)}, 0x48) 09:46:17 executing program 3: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x8) 09:46:17 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default]}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) recvfrom$ax25(r2, &(0x7f0000000080)=""/232, 0xe8, 0x120, &(0x7f0000000180)={{0x3, @bcast, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket(0xa, 0x4, 0xcd) syz_usbip_server_init(0x2) ioctl$SIOCAX25GETINFO(r3, 0x89ed, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:46:17 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) [ 1268.309273][T17297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1268.316096][T17297] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1268.325219][T17297] vhci_hcd vhci_hcd.0: Device attached 09:46:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)={0x14, r1, 0x301}, 0x14}}, 0x0) 09:46:18 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x1}, 0x10}}, 0x0) [ 1268.965028][T17301] vhci_hcd: connection closed [ 1268.966315][ T3680] vhci_hcd: stop threads [ 1268.975884][ T3680] vhci_hcd: release socket [ 1268.980496][ T3680] vhci_hcd: disconnect device 09:46:19 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="19", 0x1}, {0x0}], 0x2, &(0x7f0000000540)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 09:46:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) 09:46:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:46:19 executing program 2: syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) recvfrom$ax25(r1, &(0x7f0000000080)=""/232, 0xe8, 0x120, &(0x7f0000000180)={{0x3, @bcast, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = socket(0xa, 0x4, 0xcd) r3 = syz_usbip_server_init(0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000240)={0x8}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000280)) 09:46:19 executing program 0: syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0xf0) r0 = socket(0xa, 0x4, 0xcd) syz_usbip_server_init(0x2) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000280)) 09:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x2}]}, 0x1c}}, 0x0) [ 1270.152453][T17325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1270.159256][T17325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1270.167661][T17325] vhci_hcd vhci_hcd.0: Device attached 09:46:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x100) [ 1270.290690][T17331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1270.297491][T17331] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1270.306023][T17331] vhci_hcd vhci_hcd.0: Device attached [ 1270.402976][ T3147] vhci_hcd: vhci_device speed not set [ 1270.443396][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1270.482329][ T3147] usb 13-1: new full-speed USB device number 2 using vhci_hcd 09:46:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) 09:46:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) [ 1270.836214][T17326] vhci_hcd: connection reset by peer [ 1270.879069][ T9319] vhci_hcd: stop threads [ 1270.884173][ T9319] vhci_hcd: release socket [ 1270.888819][ T9319] vhci_hcd: disconnect device [ 1270.979032][T17332] vhci_hcd: connection closed [ 1270.979931][ T3549] vhci_hcd: stop threads [ 1270.989609][ T3549] vhci_hcd: release socket [ 1270.994409][ T3549] vhci_hcd: disconnect device 09:46:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:21 executing program 2: setresuid(0xee00, 0xee00, 0x0) setresuid(0xee00, 0x0, 0xffffffffffffffff) 09:46:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) creat(0x0, 0x100) 09:46:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0), 0x20) creat(0x0, 0x0) 09:46:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) 09:46:22 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$qnx6(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1c", 0x1}, {0x0}], 0x0, &(0x7f00000001c0)={[{'}'}]}) pkey_alloc(0x0, 0x2) syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@jqfmt_vfsv0}]}) syz_mount_image$xfs(0x0, &(0x7f0000000b80)='./file0\x00', 0x0, 0x5, &(0x7f0000001f40)=[{0x0, 0x0, 0x200}, {0x0}, {&(0x7f0000000d40)="9574fe259cc9b0b3d2bad6564f23680ec440a4cb0e66bc097696cd4eebdc566e863b750059230126c425bdaea0612262c6da0bf6cbc36faed778fb538642ef89bafbf64433d3ff46810d0e74860b72dc38b66753babaaed7687258b71bf18df0b682dee335c64ffa13235f5c9b6d2338205a9f7bf9a912718fbc7c0f5cd4b481fc37a759ba3bdd", 0x87, 0x4}, {&(0x7f0000000e00), 0x0, 0x7}, {0x0}], 0x800000, &(0x7f0000002040)={[], [{@subj_type={'subj_type', 0x3d, '\')}{&-@\']%,'}}, {@permit_directio}]}) 09:46:22 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x1f}, 0x0, 0x0) 09:46:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:23 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 09:46:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40) 09:46:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x7e7) 09:46:23 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x158) 09:46:23 executing program 1: socketpair(0x2, 0x2, 0x9, 0x0) 09:46:24 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x1}, 0x10}}, 0x0) 09:46:24 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 09:46:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 09:46:24 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='changehat 5'], 0x43) 09:46:24 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_af9015', 0x0, 0x0) 09:46:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:24 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f00000001c0)) 09:46:24 executing program 2: mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xf9e) 09:46:24 executing program 3: syz_mount_image$squashfs(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x7ee84175d21c456c, &(0x7f0000000900)) 09:46:25 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x8}, 0x0, 0x0) 09:46:25 executing program 1: syz_mount_image$sysv(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x401}], 0x0, &(0x7f0000000700)) 09:46:25 executing program 2: ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 09:46:25 executing program 3: syz_mount_image$xfs(&(0x7f0000002c00), 0x0, 0x0, 0x1, &(0x7f0000003100)=[{&(0x7f0000002c80)="a7", 0x1}], 0x0, &(0x7f00000031c0)) 09:46:25 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x7fffffff}, 0x8) [ 1275.622252][ T3147] vhci_hcd: vhci_device speed not set 09:46:25 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 09:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8) 09:46:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:26 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000ac0)) pselect6(0x40, &(0x7f00000007c0)={0xfd}, 0x0, 0x0, 0x0, 0x0) [ 1276.141037][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 1276.141110][ T24] audit: type=1326 audit(1659606386.187:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17405 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7faf549 code=0x0 09:46:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x0, "afffffffffc3130b"}) 09:46:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 09:46:26 executing program 1: syz_mount_image$qnx6(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x82001, &(0x7f0000000400)) 09:46:26 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 09:46:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}}, 0x18) 09:46:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40880) read$FUSE(r0, 0x0, 0x0) 09:46:27 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 09:46:27 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:27 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x20280, 0x0) 09:46:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:27 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000240), 0xfffffffffffffff5) 09:46:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private1}}}, 0x30) 09:46:27 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {}, {@allow_other}, {}, {@max_read={'max_read', 0x3d, 0x9}}]}}) 09:46:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) 09:46:28 executing program 1: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x1, &(0x7f0000003100)=[{0x0}], 0x0, &(0x7f00000031c0)={[{@filestreams}]}) 09:46:28 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x11) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) getuid() 09:46:28 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 09:46:28 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}], 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/95, &(0x7f0000000080)=0x5f) 09:46:28 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x11) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) getuid() 09:46:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 09:46:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:29 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1a4c0, 0x0) 09:46:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0xfffffffffffffe00}}, 0x0) 09:46:29 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 09:46:29 executing program 5: write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, "89dd6b0136686aaf"}) 09:46:30 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$usbfs(r0, &(0x7f0000000100)=""/165, 0xa5) 09:46:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 09:46:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 09:46:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:30 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000200)) 09:46:30 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) 09:46:30 executing program 3: getgroups(0x405bd7d6e18f8ade, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01]) 09:46:30 executing program 1: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8000000000000001}, &(0x7f0000000100), 0x0) 09:46:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:31 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x158) 09:46:31 executing program 2: socket(0x23, 0x0, 0x10801) 09:46:31 executing program 5: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0xffffffffffffffff) 09:46:31 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 09:46:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/249) 09:46:31 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x158) 09:46:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:31 executing program 5: syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@sunit}, {@noattr2}]}) 09:46:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 09:46:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) 09:46:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:32 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x1f}, 0x0, 0x0) 09:46:32 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x158) [ 1282.414331][T17510] XFS: noattr2 mount option is deprecated. 09:46:32 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x8}, 0x0, 0x0) [ 1282.690354][T17510] XFS (loop5): Invalid superblock magic number 09:46:32 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000200)={0x9}, 0x0, 0x0) 09:46:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:33 executing program 5: syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@sunit}, {@noattr2}]}) 09:46:33 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[], 0x158) 09:46:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) 09:46:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:33 executing program 3: io_setup(0x0, &(0x7f0000000000)) io_setup(0x1000, &(0x7f0000000100)) [ 1283.610836][T17534] XFS: noattr2 mount option is deprecated. [ 1283.767599][T17534] XFS (loop5): Invalid superblock magic number 09:46:34 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) 09:46:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 09:46:34 executing program 5: syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@sunit}, {@noattr2}]}) 09:46:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) 09:46:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter6\x00') read$FUSE(r0, 0x0, 0x0) 09:46:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000500)) 09:46:34 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) [ 1284.755384][T17556] XFS: noattr2 mount option is deprecated. 09:46:35 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {}, {@allow_other}, {}, {}]}}) [ 1284.907651][T17556] XFS (loop5): Invalid superblock magic number 09:46:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:35 executing program 5: syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@sunit}, {@noattr2}]}) 09:46:35 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$usbfs(r0, 0x0, 0x0) 09:46:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x5}]}) 09:46:35 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:46:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) [ 1285.932249][T17578] XFS: noattr2 mount option is deprecated. 09:46:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 09:46:36 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) 09:46:36 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) [ 1286.275225][T17578] XFS (loop5): Invalid superblock magic number 09:46:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x101) 09:46:36 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x101]}, 0x8}) 09:46:36 executing program 1: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)) 09:46:36 executing program 2: getresgid(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x24, 0x4, &(0x7f0000003100)=[{&(0x7f0000002c80)="a793622e1d76fc8b8a44c282e18bb699", 0x10, 0x81}, {&(0x7f0000002d80)='&', 0x1, 0x48fc9160}, {&(0x7f0000002e00), 0x0, 0x1}, {0x0}], 0x10882, &(0x7f00000031c0)={[{@gqnoenforce}, {@biosize}, {@filestreams}, {@discard}, {@allocsize={'allocsize', 0x3d, [0x30, 0x2d, 0x38, 0x67, 0x0, 0x67]}}], [{@fowner_lt}, {@dont_measure}, {@fowner_lt}, {@obj_type={'obj_type', 0x3d, 'group_id'}}]}) syz_mount_image$vxfs(&(0x7f0000005300), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={[{}, {'filestreams'}, {'unconfined_u'}, {'dont_measure'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 09:46:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:37 executing program 0: setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) 09:46:37 executing program 1: openat$binderfs(0xffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000540), 0x2200c0, 0x0) syz_clone(0x8880000, &(0x7f00000000c0)="e3988b50aaa931c5c8191d2d5ceb7bdb14444c1805f7a406358037258d39181402175d42eea4c93b2b848198a1e621acc826b0eeef64536450abd9602487fd006f1edf0d17ff366806e188d54d5aa791f7ef93e01b3d7f57bc3fb29c8c0a8573c8492992ac2455e43e0e42ec189ad6dcca47da6d40a89220ee4c28080883b836a1ebf27c075d8c615877cbcaedcbe4c737698036f001385b7694d31fbf6e45d690aa7121742ca43fa89411d8a9c8fc25d3f3f6453af2c28842095e6dc8", 0xbd, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 09:46:37 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_clone(0x410c3400, &(0x7f00000004c0)="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", 0x1ca, &(0x7f0000000040), &(0x7f0000000100), 0x0) 09:46:37 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 09:46:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 09:46:37 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_usb_af9015', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) 09:46:38 executing program 1: getresgid(&(0x7f0000000040), 0x0, 0x0) [ 1288.256826][T17617] Restarting kernel threads ... done. 09:46:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x0, 0xcfdf5ec816a397ec}, 0x14}}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x8}, 0x0, 0x0) 09:46:38 executing program 0: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x0, &(0x7f00000031c0)) 09:46:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 09:46:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @dev}}}, 0xa0) 09:46:38 executing program 1: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 09:46:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f00000008c0), 0x0, &(0x7f0000000940)={0x8}, &(0x7f0000000980)) 09:46:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)) 09:46:39 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x32dc00, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 09:46:39 executing program 2: sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x4, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "18b5c7ad5acdf456"}, 0x10}, 0x1, 0x0, 0x0, 0x4048040}, 0x4008091) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x82041, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_hash}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x28, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) getegid() syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vxfs(&(0x7f0000005300), 0x0, 0x0, 0x2, &(0x7f0000006580)=[{&(0x7f0000005380)="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", 0x1000, 0x7}, {0x0, 0x0, 0x10000}], 0x100000, &(0x7f0000006600)={[{}, {'unconfined_u'}], [{@obj_type={'obj_type', 0x3d, '%/'}}, {@subj_user={'subj_user', 0x3d, 'blksize'}}]}) 09:46:39 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000002640)='./file0\x00', 0x24000, 0x0) 09:46:39 executing program 0: socketpair(0x1d, 0x0, 0x8, 0x0) 09:46:40 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 09:46:40 executing program 5: setresgid(0x0, 0x0, 0x0) 09:46:40 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:40 executing program 2: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0xfffffffffffffffc) 09:46:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 09:46:40 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40002, 0x0) 09:46:40 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x28, 0x0) 09:46:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/arp\x00') read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) 09:46:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:41 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000100)='\v', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 09:46:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 09:46:41 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:41 executing program 1: sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x82041, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) open$dir(&(0x7f0000002640)='./file0\x00', 0x24000, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vxfs(&(0x7f0000005300), &(0x7f0000005340)='./file0\x00', 0x0, 0x3, &(0x7f0000006580)=[{0x0}, {&(0x7f0000006380)="358009de792049a458aae2af9474178531cc61cc3acb349ebae6267c5101fecb24a94578020e9734553c2c48771e5a6cc9ef9c5b96f8e9428093645eeed8820124566a46bd1aa0b6fae33e48ce4b9204380664782c042a4c6994472daf022481d981232aafdcde2e7ac51904dbeed5e0238b33fb4ac8c8d7536e09866c9213fc07c4fd12182e85da64e79bc520a96faf5d5e7f8b4bc0f2087107512f63ba45457b12dcaedce66b400c3c1ad55b534adf33e5ee4833fe33f6e5e52cdabf260bf48995dd8583c3ec87569742d72c659cbf1eaa8d4a83a014b50cd2cf6178642c830b71e254f19bafb1b6eacb", 0xeb, 0x10000}, {&(0x7f0000006480)="1bbd424be2df9132100652217c09916adf5392b51a23c80c303625263903b76648f33c5599c34420b97d3222905c2270ca7307d4bedf52bfe99938e2bf7863f83b9941c1ed07b0b112e2b6a4ec5181a0d8d782cb6a96d0599ec124b413a394243db5d7bb42a67cdf20a0fc8839ff830d959d946a9624a72f8d84b559a93f0741cae9daa0d49d0c627bd1cc44eb072a344e800148115218b36ba5ab8b360bb93ff3b1880a95d2f1f4902b385efc763ce46ce04ad03885a10700fdbb9bd276b9296d1686ee4b83a82c50f827163dd9670a7b74dc0e6b2f9d4932b0fba03061e0952c63a68c15b40bbe4e043c58842526c6e27db8", 0xf3, 0x81}], 0x100000, &(0x7f0000006600)={[{}, {'filestreams'}, {'unconfined_u'}], [{@obj_type={'obj_type', 0x3d, '%/'}}, {@subj_user={'subj_user', 0x3d, 'blksize'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) getresgid(0x0, 0x0, 0x0) 09:46:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 09:46:41 executing program 3: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x10882, &(0x7f00000031c0)) 09:46:41 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/95, &(0x7f0000000080)=0x5f) 09:46:42 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 09:46:42 executing program 2: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) 09:46:42 executing program 1: syz_mount_image$romfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x840, &(0x7f0000001a80)=ANY=[]) 09:46:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000400)=0x10) 09:46:42 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1292.690675][T17683] XFS (loop3): Invalid superblock magic number 09:46:42 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getdents(r0, 0x0, 0x0) 09:46:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xfd33) 09:46:43 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$snapshot(r0, 0x0, 0x0) 09:46:43 executing program 2: fanotify_mark(0xffffffffffffffff, 0x2, 0x40000011, 0xffffffffffffff9c, 0x0) 09:46:43 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 09:46:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) 09:46:43 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) [ 1293.727444][T17710] Restarting kernel threads ... done. 09:46:43 executing program 1: syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@session}, {@file_umask}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}) 09:46:43 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:46:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) 09:46:44 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000", @ANYRES64, @ANYBLOB="010000000000000000000000000000000400000000000000cd"], 0x158) 09:46:44 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14}, 0x14) write$P9_RLERRORu(r0, 0x0, 0x2) 09:46:44 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 09:46:44 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0xecf359a5d59ca71f, 0x0) 09:46:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) 09:46:44 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000", @ANYRES64, @ANYBLOB="010000000000000000000000000000000400000000000000cd"], 0x158) 09:46:44 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) 09:46:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)) 09:46:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xb}, 0x0, 0x0) 09:46:45 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) 09:46:45 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000", @ANYRES64, @ANYBLOB="010000000000000000000000000000000400000000000000cd"], 0x158) 09:46:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) 09:46:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 09:46:46 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 09:46:46 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008480)={0x2020}, 0x2020) 09:46:46 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000", @ANYRES64, @ANYBLOB="010000000000000000000000000000000400000000000000cd"], 0x158) 09:46:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)) 09:46:46 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x4ac0, 0x0) 09:46:46 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 09:46:46 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 09:46:47 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f00000003c0)) [ 1297.244852][ T24] audit: type=1800 audit(1659606407.297:62): pid=17772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1169 res=0 errno=0 09:46:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:47 executing program 2: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) [ 1297.496270][ T24] audit: type=1326 audit(1659606407.547:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17776 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd0549 code=0x0 09:46:47 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@hat={'changehat ', 0x4}, 0x1d) 09:46:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=@newqdisc={0x24}, 0x24}}, 0x0) 09:46:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)) 09:46:47 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x5b, 0x0}, 0xfffffdf6) 09:46:48 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x4, 0x4) 09:46:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) [ 1298.104672][ T24] audit: type=1400 audit(1659606408.157:64): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17784 comm="syz-executor.3" 09:46:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x202001) 09:46:48 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 09:46:48 executing program 5: getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) 09:46:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)) 09:46:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x24}}, 0x0) 09:46:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) 09:46:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x87}) 09:46:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) 09:46:49 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:46:49 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'changehat ', 0x3}, 0x1d) 09:46:49 executing program 2: socket(0x28, 0x0, 0x10001) [ 1299.403728][T17811] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:46:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) 09:46:49 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f00000002c0), 0x10) 09:46:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)={[{@logdev={'logdev', 0x3d, './file0'}}, {@usrquota}, {@largeio}]}) [ 1299.789659][ T24] audit: type=1400 audit(1659606409.837:65): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17816 comm="syz-executor.1" 09:46:49 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 09:46:49 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 09:46:50 executing program 2: socket(0x22, 0x0, 0x5) [ 1300.210081][T17821] XFS (loop4): Invalid device [./file0], error=-15 09:46:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 09:46:50 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x21000001, 0x4) 09:46:50 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{}, {@blksize}], [{@dont_hash}]}}) mount$fuseblk(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x28, 0x0) read$FUSE(r0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x24, 0x4, &(0x7f0000003100)=[{0x0, 0x0, 0x48fc9160}, {&(0x7f0000002e00)="2fb801f4bcd1fe66ff6990da34f5b6f8807c0fac28cdf3bb94a3ec38fd26df7f650e90364d3ccafa011c2f72951122c51f6844baeb59507b0711665a916d39759d97f1bc5bc7fbc9f2046d", 0x4b, 0x1}, {&(0x7f0000002f80)="6812ef6b421401aafab2741a43afbb8dc3516a39ec3549cfd2caba0c06597b1edf7a92ec83ebf401e80bc30dad3a871c8106d2", 0x33, 0x2}, {&(0x7f0000003000)="fe5c4d3eb5cdc51ad22d7de791f2fdd980309da76cf57b6aabb16774cc2bc075f28fef21e80df129da212774fefa896ff6193a7465c09124adc4c6ea1f3ecdec45d46e965f6a81f1166ec9fcc0ad39304f7c4071edcb0bb2fd44d1720daa5f7c684928b42f2b0e2cc7b8ca4cc824875089799ad68aa2a6a45fe1abb05d15efa8a5bf4973bcab2ec089ea917e93671aa8c7189c08fd3352e188416c60d391e460f57a6848d1f0e6d8c0ccce3d1774bf69bc243a21c7c64d3ea010164bc17a0f3b31ffb1e53db1d8bd35e67c5bb155b2138cb5145c82608d84390b0026f8898cf2a4678b09772c", 0xe6, 0x7}], 0x0, &(0x7f00000031c0)={[{@biosize}, {@biosize}, {@allocsize={'allocsize', 0x3d, [0x30, 0x32, 0x0, 0x0]}}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'group_id'}}]}) getuid() 09:46:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r0, 0x0, 0x0) 09:46:50 executing program 1: syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x8bf39403e5f22e66}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 09:46:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:46:51 executing program 3: pipe2$9p(&(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000200)={0x9}, 0x0, 0x0) 09:46:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00'}, 0x45c) 09:46:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) [ 1301.187403][T17841] fuse: Bad value for 'fd' 09:46:51 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x3832ba6d3af1b1d7) 09:46:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xfd33) 09:46:51 executing program 5: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x83066ad64861aef6) 09:46:51 executing program 4: fchownat(0xffffffffffffffff, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0) 09:46:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 09:46:51 executing program 1: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x0, &(0x7f00000031c0)={[{@allocsize={'allocsize', 0x3d, [0x30, 0x0]}}]}) 09:46:52 executing program 5: getgroups(0x1, &(0x7f0000002000)=[0xee01]) 09:46:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:52 executing program 0: syz_open_dev$vcsa(&(0x7f0000000180), 0x2, 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0xb}, 0x0, 0x0) 09:46:52 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 09:46:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:46:52 executing program 1: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8000000000000001}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x2710}) 09:46:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"9100f40300"}}}}, 0x90) 09:46:52 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}}, 0x0) 09:46:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 09:46:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x4, 0x0, 0x0, "d0771403"}) 09:46:53 executing program 4: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x10882, &(0x7f00000031c0)={[{@gqnoenforce}, {@biosize}, {@filestreams}, {@discard}, {@allocsize={'allocsize', 0x3d, [0x30, 0x2d, 0x67]}}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 09:46:53 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 09:46:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"9100f40300"}}}}, 0x90) 09:46:53 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) [ 1303.546584][T17883] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1303.576012][T17885] xfs: Unknown parameter 'biosize' 09:46:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 09:46:53 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 09:46:53 executing program 4: syz_mount_image$xfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x0, 0x0, &(0x7f0000003100), 0x0, &(0x7f00000031c0)={[{@allocsize}]}) 09:46:53 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x12f040) 09:46:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"9100f40300"}}}}, 0x90) 09:46:54 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=@profile={'permprofile ', '/proc/tty/ldiscs\x00'}, 0x1d) 09:46:54 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x10) [ 1304.398548][T17900] xfs: Bad value for 'allocsize' 09:46:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 09:46:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 09:46:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002880)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) [ 1304.730156][ T24] audit: type=1400 audit(1659606414.777:66): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="/proc/tty/ldiscs" pid=17901 comm="syz-executor.2" 09:46:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b9cb1"], 0x14}}, 0x0) 09:46:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 09:46:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"9100f40300"}}}}, 0x90) 09:46:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') read$FUSE(r0, 0x0, 0x0) 09:46:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 09:46:55 executing program 4: getrandom(&(0x7f00000000c0)=""/4, 0xffffffffffffffbf, 0x0) 09:46:55 executing program 2: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000003100)=[{&(0x7f0000002c80)="a7", 0x1}, {&(0x7f0000002cc0)=';', 0x1}, {&(0x7f0000002d80)='&', 0x1, 0x48fc9160}, {&(0x7f0000002e00)='/', 0x1}], 0x0, 0x0) 09:46:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 09:46:55 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x9e1f, 0x8300) 09:46:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 09:46:56 executing program 0: syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x0) 09:46:56 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) 09:46:56 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x5f, 0x2a240) 09:46:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) 09:46:56 executing program 3: pselect6(0x40, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={0x80000000}, &(0x7f0000001300)={0x77359400}, 0x0) 09:46:56 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x260880) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xb}, 0x0, 0x0) 09:46:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:46:57 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) 09:46:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 09:46:57 executing program 1: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000002340)=[{&(0x7f0000001d80)="b0", 0x1}, {&(0x7f0000001f40)="a7", 0x1, 0x1200000}, {&(0x7f0000002040)='t', 0x1, 0xd89a}], 0x0, 0x0) 09:46:57 executing program 3: openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 09:46:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 09:46:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 09:46:57 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 09:46:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 09:46:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 09:46:57 executing program 3: r0 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 09:46:58 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3ff, 0x0, 0x7fff, 0x0, 0x0, "84aefcae6c4b564d"}) 09:46:58 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0xa0201c, &(0x7f0000000980)=ANY=[]) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x47000400) 09:46:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x801, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5}]}, 0x24}}, 0x0) 09:46:58 executing program 1: socket(0x29, 0x5, 0x6) 09:46:58 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[]) 09:46:58 executing program 0: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 09:46:58 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') read$FUSE(r0, 0x0, 0x0) 09:46:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 09:46:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') write$apparmor_current(r0, 0x0, 0x0) 09:46:59 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) [ 1309.199768][T17979] Can't find a SQUASHFS superblock on loop4 09:46:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 09:46:59 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x3f}, 0x0, 0x0) 09:46:59 executing program 4: syz_mount_image$squashfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) 09:46:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000900)={[{@logdev={'logdev', 0x3d, './file0'}}]}) 09:46:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xffe000, 0x2, 0x0, "2eb9936ce2c778be30de2876339cabffc2efed"}) [ 1309.943230][T17991] Restarting kernel threads ... done. 09:47:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 09:47:00 executing program 3: syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000200)) 09:47:00 executing program 1: syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001700)={[{@inode64}]}) 09:47:00 executing program 2: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x40800) 09:47:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 09:47:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 09:47:00 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xfd33) 09:47:00 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f00000002c0)={0x23, 0x0, 0x8}, 0x10) 09:47:00 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f00000000c0), 0xffffffffffffff1b) 09:47:00 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x519403, 0x0) 09:47:01 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 09:47:01 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 09:47:01 executing program 2: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) 09:47:01 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/46, 0x2e}}, 0x120) write$UHID_CREATE2(r0, &(0x7f0000001280)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 09:47:01 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 09:47:01 executing program 0: linkat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xffffffffffffffff, 0x0, 0x1400) 09:47:01 executing program 5: renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0) 09:47:01 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) [ 1311.998283][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.006225][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.014105][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.021748][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.029689][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.037537][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.045402][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.053349][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.064852][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.073055][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.080699][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.088531][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.096281][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.104084][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.111742][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.119499][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.127328][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.135097][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.142922][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.150633][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.158476][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.166358][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.174277][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.182072][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.189938][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.197779][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.205738][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.213644][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.221393][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.229142][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.236966][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.244724][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.252547][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.260470][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.268404][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.276160][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.283974][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.291658][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.299497][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.307246][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.315078][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.322848][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.330610][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.338424][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 09:47:02 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/46, 0x2e}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) [ 1312.346198][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1312.354015][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 09:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') read$FUSE(r0, 0x0, 0x0) 09:47:02 executing program 5: getrandom(&(0x7f00000000c0)=""/4, 0xffffffffffffffbf, 0x1) 09:47:02 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x49) 09:47:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=@newqdisc={0x24}, 0x24}}, 0x0) [ 1312.696783][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.704700][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.713253][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.720919][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.728896][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.736741][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.744536][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.752304][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.759952][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.768236][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.775953][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.791473][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.799737][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.807454][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.815171][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.822873][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.830544][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.838334][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.846042][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.853822][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.861466][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.869225][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.876938][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.884732][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.892439][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.900078][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.904645][ T3560] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1312.907755][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.924962][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.932718][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.940355][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.948118][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.955818][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.963606][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.971241][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.979019][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.986726][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1312.994494][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.002201][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.009846][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.017608][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.025327][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.033095][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.040735][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.048514][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.056234][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1313.064029][ T3147] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 09:47:03 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 09:47:03 executing program 4: sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x82041, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_lt}]}}) getresgid(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) open$dir(&(0x7f0000002640)='./file0\x00', 0x24000, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000002bc0)={0x18}, 0x18) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000003100), 0x0, 0x0) syz_mount_image$vxfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000006580)=[{&(0x7f0000005380)="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", 0xffa, 0x7}, {&(0x7f0000006380)='5', 0x1, 0x10000}], 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) 09:47:03 executing program 3: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001600)=[{&(0x7f0000000240)="19", 0x1}, {&(0x7f0000000280)='t', 0x1, 0x100000000}, {&(0x7f00000002c0)="e4", 0x1}], 0x0, 0x0) 09:47:03 executing program 0: openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz0\x00', 0x200002, 0x0) 09:47:03 executing program 1: r0 = socket(0x1, 0x5, 0x0) read$alg(r0, &(0x7f0000000000)=""/13, 0xd) 09:47:04 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/46, 0x2e}}, 0x120) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000280), 0xa) 09:47:04 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 1314.471486][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.479360][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.487173][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.495119][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.502972][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.510628][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.522305][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.530324][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.538091][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.545859][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.553708][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.561364][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.569177][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.576943][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.584760][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.592495][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.600159][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.607990][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.615750][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.623555][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.631202][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.639018][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.646769][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.654579][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.662315][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.669971][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.677791][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.685550][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.693348][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.700984][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.708785][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.716528][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.724336][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.732083][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.739735][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.747540][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.755273][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.763057][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.770687][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.778487][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.786223][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.794023][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.801664][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.804738][ T3147] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1314.809392][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.826631][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1314.834447][ T3560] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 09:47:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 09:47:05 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xfd33) 09:47:05 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='fd/3\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x158) 09:47:05 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') 09:47:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='uid_map\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 09:47:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x6, 0x1000, 0xffffffffffffffff, 0x0) 09:47:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)) 09:47:05 executing program 5: syz_mount_image$adfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[], [{@subj_type={'subj_type', 0x3d, '%'}}]}) 09:47:05 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 09:47:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000380)) [ 1315.891804][T18080] ADFS-fs (loop5): unrecognised mount option "subj_type=%" or missing value [ 1316.276287][ T3560] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 09:47:06 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40012161, 0x0, 0x0) 09:47:06 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 09:47:06 executing program 0: syz_open_dev$media(&(0x7f00000005c0), 0xd8f, 0x0) 09:47:06 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x77359400}, 0x0) 09:47:06 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$snapshot(r0, &(0x7f0000000600)="f1", 0x1) 09:47:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', 0x0}) 09:47:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 09:47:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={0x0, 0x63, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 09:47:06 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 09:47:06 executing program 1: request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffb) 09:47:07 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 09:47:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') read$FUSE(r0, 0x0, 0x0) 09:47:07 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 09:47:07 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 09:47:07 executing program 4: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x18, 0xfffffffffffffffc) 09:47:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}, 0x2}, 0x0) 09:47:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan4\x00'}) 09:47:07 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x800) 09:47:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) close(0xffffffffffffffff) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @multicast2}, &(0x7f0000000180)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 09:47:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffff1, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:47:08 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 09:47:08 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x2, 0x0) [ 1318.609040][ T24] audit: type=1800 audit(1659606428.657:67): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1177 res=0 errno=0 [ 1318.787742][ T24] audit: type=1804 audit(1659606428.697:68): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir511419626/syzkaller.ryUkL2/1047/file0" dev="sda1" ino=1177 res=1 errno=0 [ 1318.974228][T18125] ===================================================== [ 1318.981476][T18125] BUG: KMSAN: uninit-value in __io_fill_cqe_req+0x9bd/0xed0 [ 1318.989052][T18125] __io_fill_cqe_req+0x9bd/0xed0 [ 1318.994174][T18125] io_submit_flush_completions+0x175/0x420 [ 1319.000099][T18125] io_submit_sqes+0x7d3/0xd50 [ 1319.004944][T18125] __se_sys_io_uring_enter+0x670/0x25c0 [ 1319.010574][T18125] __ia32_sys_io_uring_enter+0x115/0x190 [ 1319.016373][T18125] __do_fast_syscall_32+0x87/0xe0 [ 1319.021476][T18125] do_fast_syscall_32+0x33/0x70 [ 1319.026545][T18125] do_SYSENTER_32+0x1b/0x20 [ 1319.031178][T18125] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.037719][T18125] [ 1319.040075][T18125] Uninit was stored to memory at: [ 1319.045281][T18125] io_issue_sqe+0x17a24/0x19760 [ 1319.050217][T18125] io_submit_sqe+0x8b22/0xa8b0 [ 1319.055173][T18125] io_submit_sqes+0x542/0xd50 [ 1319.059938][T18125] __se_sys_io_uring_enter+0x670/0x25c0 [ 1319.065819][T18125] __ia32_sys_io_uring_enter+0x115/0x190 [ 1319.071534][T18125] __do_fast_syscall_32+0x87/0xe0 [ 1319.076721][T18125] do_fast_syscall_32+0x33/0x70 [ 1319.081653][T18125] do_SYSENTER_32+0x1b/0x20 [ 1319.086303][T18125] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.092830][T18125] [ 1319.095187][T18125] Local variable iomsg.i410 created at: [ 1319.100769][T18125] io_issue_sqe+0x1ae5/0x19760 [ 1319.105695][T18125] io_submit_sqe+0x8b22/0xa8b0 [ 1319.110547][T18125] [ 1319.112977][T18125] CPU: 0 PID: 18125 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1319.123644][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1319.133848][T18125] ===================================================== [ 1319.140825][T18125] Disabling lock debugging due to kernel taint [ 1319.147095][T18125] Kernel panic - not syncing: kmsan.panic set ... [ 1319.153557][T18125] CPU: 0 PID: 18125 Comm: syz-executor.2 Tainted: G B 5.19.0-rc8-syzkaller-32530-g2ac027718918 #0 [ 1319.165536][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1319.175656][T18125] Call Trace: [ 1319.178983][T18125] [ 1319.181973][T18125] dump_stack_lvl+0x1c8/0x256 [ 1319.186787][T18125] dump_stack+0x1a/0x1c [ 1319.191062][T18125] panic+0x4d3/0xc69 [ 1319.195058][T18125] ? kmsan_get_shadow_origin_ptr+0x70/0xa0 [ 1319.200986][T18125] ? add_taint+0x104/0x1a0 [ 1319.205562][T18125] kmsan_report+0x2cc/0x2d0 [ 1319.210255][T18125] ? kmsan_get_metadata+0x33/0x220 [ 1319.215554][T18125] ? __msan_warning+0x92/0x110 [ 1319.220494][T18125] ? __io_fill_cqe_req+0x9bd/0xed0 [ 1319.225782][T18125] ? io_submit_flush_completions+0x175/0x420 [ 1319.231968][T18125] ? io_submit_sqes+0x7d3/0xd50 [ 1319.236977][T18125] ? __se_sys_io_uring_enter+0x670/0x25c0 [ 1319.242806][T18125] ? __ia32_sys_io_uring_enter+0x115/0x190 [ 1319.248699][T18125] ? __do_fast_syscall_32+0x87/0xe0 [ 1319.253980][T18125] ? do_fast_syscall_32+0x33/0x70 [ 1319.259084][T18125] ? do_SYSENTER_32+0x1b/0x20 [ 1319.263836][T18125] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.270478][T18125] ? __rcu_read_unlock+0x76/0xd0 [ 1319.275556][T18125] ? kmsan_get_metadata+0x33/0x220 [ 1319.280759][T18125] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.286666][T18125] ? __io_get_cqe+0x2f8/0x370 [ 1319.291428][T18125] ? kmsan_get_metadata+0x33/0x220 [ 1319.296626][T18125] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.302556][T18125] __msan_warning+0x92/0x110 [ 1319.307241][T18125] __io_fill_cqe_req+0x9bd/0xed0 [ 1319.312264][T18125] ? kmsan_get_metadata+0x33/0x220 [ 1319.317469][T18125] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1319.323819][T18125] io_submit_flush_completions+0x175/0x420 [ 1319.329748][T18125] io_submit_sqes+0x7d3/0xd50 [ 1319.334575][T18125] __se_sys_io_uring_enter+0x670/0x25c0 [ 1319.340270][T18125] ? xfd_validate_state+0x91/0x210 [ 1319.345521][T18125] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1319.351432][T18125] __ia32_sys_io_uring_enter+0x115/0x190 [ 1319.357183][T18125] __do_fast_syscall_32+0x87/0xe0 [ 1319.362310][T18125] do_fast_syscall_32+0x33/0x70 [ 1319.367247][T18125] do_SYSENTER_32+0x1b/0x20 [ 1319.371826][T18125] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1319.378310][T18125] RIP: 0023:0xf7faf549 [ 1319.382438][T18125] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1319.402174][T18125] RSP: 002b:00000000f7faa5cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1319.410724][T18125] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000002ff [ 1319.418775][T18125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1319.426808][T18125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1319.434870][T18125] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1319.442968][T18125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.451021][T18125] [ 1319.454263][T18125] Kernel Offset: disabled [ 1319.458717][T18125] Rebooting in 86400 seconds..